Static task
static1
Behavioral task
behavioral1
Sample
4b1838251437d227a01373a7de93ab87_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b1838251437d227a01373a7de93ab87_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
4b1838251437d227a01373a7de93ab87_JaffaCakes118
-
Size
4.5MB
-
MD5
4b1838251437d227a01373a7de93ab87
-
SHA1
3fe8c039cc58a43d8ce7239bbf7ed9ab9256380f
-
SHA256
125446b4547d4831802279f4cf5ed721492b48a850585999e9d7b5889efff336
-
SHA512
e65470f425cc986f5481a3e9e38adbe4f89dda29753f7f53c57c12646d0d3a78bde1914a4a0ef6d528ece89af2c82cacfbc68a5566678d2291bca45c83fc5d54
-
SSDEEP
98304:PN3W3t7XP3porGnPEihRl1T4HA4GvWFQvbr3E25F/VbkX7dkKmkLNwvoO:PdW97XvporGnPE6V4g45ebr3EobkX7d8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b1838251437d227a01373a7de93ab87_JaffaCakes118
Files
-
4b1838251437d227a01373a7de93ab87_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c372311534116eeffdf56f3f6c69c5c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
ExitProcess
GetProcAddress
user32
wsprintfA
MessageBoxA
Sections
CODE Size: 407KB - Virtual size: 992KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 40KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.0MB - Virtual size: 15.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sinaps Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE