Static task
static1
Behavioral task
behavioral1
Sample
a1028a7950e55ef254c2b32e1a922a75_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a1028a7950e55ef254c2b32e1a922a75_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a1028a7950e55ef254c2b32e1a922a75_JaffaCakes118
-
Size
51KB
-
MD5
a1028a7950e55ef254c2b32e1a922a75
-
SHA1
7b469ad6f6757c8f0eb123877fb2085cdff1611c
-
SHA256
ea84e5edd3f60be81540531d6c2553224d7697f3b5d06988aa5ada58f4903b89
-
SHA512
6afb607d136ccbf8571aedc51c1b113f034421542346757addd3946cebbd96a6c5e5a51d3079fcb11801615827c888b440b74b964bd36bef389744bca7647eb4
-
SSDEEP
768:CXfQEEPay9OpAJvyRk11O00yJ4JX9HqojpmauCoRs9JLY8wTs:C6z11fvJUX9HTroRsHLV3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1028a7950e55ef254c2b32e1a922a75_JaffaCakes118
Files
-
a1028a7950e55ef254c2b32e1a922a75_JaffaCakes118.exe windows:4 windows x86 arch:x86
bef681911b2a98dacce060317fe37ee9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetVersionExA
LoadLibraryA
GetProcAddress
GetLastError
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter
GetThreadLocale
SetEnvironmentVariableA
GetLocaleInfoA
WinExec
FreeLibrary
GetVersionExA
LoadLibraryA
GetProcAddress
user32
MessageBoxA
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 261KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ