Static task
static1
Behavioral task
behavioral1
Sample
4c48a83d07370b9038f1e2ce0c918640_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4c48a83d07370b9038f1e2ce0c918640_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c48a83d07370b9038f1e2ce0c918640_JaffaCakes118
-
Size
227KB
-
MD5
4c48a83d07370b9038f1e2ce0c918640
-
SHA1
118b3930af9c66ce6a8b0e17043e40f1b17f51af
-
SHA256
45d658db07778347bd5db951b85349b05254c4de1e882f45ace01d67b41a4846
-
SHA512
48199e75380d19f4e2b880ed7eede46e6b0a6ca7879255044abe6e02a9b9f2cbeb9ea6b690fa82c2a3ee57356f9d0bde18b450459e06779fa6f440eca290e73a
-
SSDEEP
6144:K0o6X7RjtZvPk5TLZ2DjKr//tbPDqWS8lPGpMt4s1/AI3yR7zYhL:zom7RHvPeTLZca//1PDRhPztHKI3yRX6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c48a83d07370b9038f1e2ce0c918640_JaffaCakes118
Files
-
4c48a83d07370b9038f1e2ce0c918640_JaffaCakes118.exe windows:5 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 117KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7wrfglyu Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
txrhi1di Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6ro.j843 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
d3q6gqfi Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
us02tqjf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ