Static task
static1
Behavioral task
behavioral1
Sample
643fe3506bd31ced824822bd4401bdd3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
643fe3506bd31ced824822bd4401bdd3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
643fe3506bd31ced824822bd4401bdd3_JaffaCakes118
-
Size
253KB
-
MD5
643fe3506bd31ced824822bd4401bdd3
-
SHA1
8b06ef3079334dfca007576423e207b7d3f8e81d
-
SHA256
8680da69050bc5c8fe5181c208fa606c9b48a329a1cf55c1727ee023b98454ca
-
SHA512
49cc7cc6b61db4072326f36f3c755919d3b459036d7d0d59c5234de61567217e0b368b04899cafe8b22e86a33908a9754c37d0e2a26629268ddf6752cd46660c
-
SSDEEP
3072:0FvvXhqDZh5yol4/9F4XahJ3XrULg6TmEakIPNHbXBXE8U3nmlH3TdBVPKjn9qeX:+h0Qo8B5hJtXBU8RZ1ijn9KaJ1e958H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 643fe3506bd31ced824822bd4401bdd3_JaffaCakes118
Files
-
643fe3506bd31ced824822bd4401bdd3_JaffaCakes118.exe windows:5 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 143KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
f.bujnl3 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
p6s05kb5 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yua1bujr Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ork.erk8 Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mxb6rls6 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ