Static task
static1
Behavioral task
behavioral1
Sample
a04b44ea85f3eb251ecaa9b6ec4fc1cb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a04b44ea85f3eb251ecaa9b6ec4fc1cb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a04b44ea85f3eb251ecaa9b6ec4fc1cb_JaffaCakes118
-
Size
945KB
-
MD5
a04b44ea85f3eb251ecaa9b6ec4fc1cb
-
SHA1
1e1e2f9197be6f1855fa41ca417b283974ec9207
-
SHA256
94ddde050c91f76219848263802759540fc1ac956031f142b869accb947b31d9
-
SHA512
eb7fa04a01d9a81108bd1397e13aa62c58136a84bdcd52f7b41e4941c85d3c6986fc1ac0016cbc61bf5c7bd6be21b67fd4f60935b200d3eddfb1631f45756dda
-
SSDEEP
24576:2fV4DDum19CXnxhQ6akI77FB2DNEUrFQivgr/rAKK1maIJfn1j8kv:295m19Ck6ahGES4/rABczJf1Am
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a04b44ea85f3eb251ecaa9b6ec4fc1cb_JaffaCakes118
Files
-
a04b44ea85f3eb251ecaa9b6ec4fc1cb_JaffaCakes118.exe windows:5 windows x86 arch:x86
9831235c913539ae341f597d5ef039d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
GetLastError
msvcrt
malloc
iphlpapi
GetAdaptersInfo
psapi
GetMappedFileNameW
advapi32
RegOpenKeyExA
Sections
.text Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 935KB - Virtual size: 936KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ