Static task
static1
Behavioral task
behavioral1
Sample
93cbcc64fde03e900d5bb8b2dc9628a7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
93cbcc64fde03e900d5bb8b2dc9628a7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
93cbcc64fde03e900d5bb8b2dc9628a7_JaffaCakes118
-
Size
2.6MB
-
MD5
93cbcc64fde03e900d5bb8b2dc9628a7
-
SHA1
e37e9b5c3ba00cb695f9136d3ea052ae94bbe8b7
-
SHA256
6ab6528736e78e5bcf9118a4e34908ce8faa71958e63f0fef235ddff99c15825
-
SHA512
206505fd59c261b3c9a01381ad15d6224847bdc3083e3fff6ac179f7705977eb8b2db134fa85db5d9edd610f5c5980dc4473be0cd972edcbde24a8f9149e6ab8
-
SSDEEP
49152:R0h4+vFQFfOmvIDtVmOumj+Hyj6qhqyYRPHxmfNJQeqbaR3NQdgUP+R9PHYLRl0W:RCkBW/mO3j+y5qyY1ol6ekafkgUPwsR9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93cbcc64fde03e900d5bb8b2dc9628a7_JaffaCakes118
Files
-
93cbcc64fde03e900d5bb8b2dc9628a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
CODE Size: 404KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.2MB - Virtual size: 11.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE