Static task
static1
Behavioral task
behavioral1
Sample
703401d27ae6ef21bb3faae9b9e69a2a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
703401d27ae6ef21bb3faae9b9e69a2a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
703401d27ae6ef21bb3faae9b9e69a2a_JaffaCakes118
-
Size
452KB
-
MD5
703401d27ae6ef21bb3faae9b9e69a2a
-
SHA1
4ff821600cfcff2fb273238ff5bae1b15a0dfc0c
-
SHA256
184ae9e70fd5bdf10480350ac3f78b585251cbb9b4d78e529f50e019cd67613a
-
SHA512
1a8ec98c03fbc330540c40b6d7a3ca0ad35232783f7572554019f675e07552dfd0f456cabe6899605d288e44830e209264118a84adfe9459413445f463cceacd
-
SSDEEP
3072:HoNYndUuft4oii7NZY3+3oBEZeXSQtXTdl8R+D3Vvtu/wqMz:INYndvHpO3+3o4CSQtDdqwvP/z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 703401d27ae6ef21bb3faae9b9e69a2a_JaffaCakes118
Files
-
703401d27ae6ef21bb3faae9b9e69a2a_JaffaCakes118.exe windows:4 windows x86 arch:x86
847eccbd0d806aec18beb153e317c9d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadWritePtr
OutputDebugStringW
GetModuleHandleA
user32
MessageBoxA
Sections
.text Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE