Static task
static1
Behavioral task
behavioral1
Sample
5edc76c0461ebc6584b3438261444fbd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5edc76c0461ebc6584b3438261444fbd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5edc76c0461ebc6584b3438261444fbd_JaffaCakes118
-
Size
347KB
-
MD5
5edc76c0461ebc6584b3438261444fbd
-
SHA1
00c48c91cc5aa00811c4d2f25f1214963bbafde8
-
SHA256
43a0146c35298d37ab9ed98aff75657502a1412d0a81dfaa442623f3c51942df
-
SHA512
9b45d6381d72fb9eadf4d51136d8bcba7be7aabcf61676c9063ff1d7e3aaeff6f5efee48592b239290a6bae71623cb257e65957fc0370ba1b551ec81a9168ab0
-
SSDEEP
6144:UFtvnxoP2P2zGlIXm6D8hqrTI0rWSYErwnKKwaD615AVcst4Pdo7Ld1ZNC:UFtvxoOr8DHT/qg0KK9D686sICPZs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5edc76c0461ebc6584b3438261444fbd_JaffaCakes118
Files
-
5edc76c0461ebc6584b3438261444fbd_JaffaCakes118.exe windows:4 windows x86 arch:x86
e235a9ab173d958bd1d241507fc028a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
user32
MessageBoxA
Sections
CODE Size: - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yvpwv67g Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aaiwirth Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
r1reyn0j Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
y.14qm5d Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
z4dpn497 Size: 339KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE