Static task
static1
Behavioral task
behavioral1
Sample
70f7e111a9e39166862953a4cd6a897b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
70f7e111a9e39166862953a4cd6a897b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70f7e111a9e39166862953a4cd6a897b_JaffaCakes118
-
Size
261KB
-
MD5
70f7e111a9e39166862953a4cd6a897b
-
SHA1
1da55305fb43eb4aab22f8ce410fdde6acc767e7
-
SHA256
dff7ee6f7d44a5281263df4b521ff9e1e658e27937c99e3d7995a46b2f02523d
-
SHA512
890c997c2c349ea62d452e0c791b9ca1a25fc223c815dc04837cfe332a09484e68e7f44216990481a375ac78a04813bc9cf620e01024641fd73fb765f4f6c628
-
SSDEEP
6144:L5E0PdRZeFtW/PsvFXSaEu6lxjEKqWVq0Z2FnN:LySRZcKsJauojxqWVq0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70f7e111a9e39166862953a4cd6a897b_JaffaCakes118
Files
-
70f7e111a9e39166862953a4cd6a897b_JaffaCakes118.exe windows:4 windows x86 arch:x86
83aea3174fa766daf8b3cc1a0764d5f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetStdHandle
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
advapi32
RegCloseKey
Sections
CODE Size: - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 258KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE