Static task
static1
Behavioral task
behavioral1
Sample
a1f1b8eecf7b2e1cd10034ab36b7a743_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a1f1b8eecf7b2e1cd10034ab36b7a743_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a1f1b8eecf7b2e1cd10034ab36b7a743_JaffaCakes118
-
Size
981KB
-
MD5
a1f1b8eecf7b2e1cd10034ab36b7a743
-
SHA1
a33f28284ed069582ca1a227acde4e19478aa4da
-
SHA256
59a5d77d0ef5b808bfa197ef0f6c747e2d44a9b54db74e749914668b2cfafec2
-
SHA512
6d5804b2c355dd7e2149871694f6e79b424a34b3dae0785a5663bf01c0acc073b775e13f06e38320e29faa3b4113fb4101923d5dca3643202c75e5401d981eda
-
SSDEEP
24576:EacMdEEE1c2m2MEOyeJ1F2Ihua6Ea3Vh7h9tXD0jsU3X:JjEX+EE1F2IYHVh7h9tXDOLX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1f1b8eecf7b2e1cd10034ab36b7a743_JaffaCakes118
Files
-
a1f1b8eecf7b2e1cd10034ab36b7a743_JaffaCakes118.exe windows:4 windows x86 arch:x86
2e20f1bfa2cca48a02abddd8332ba20c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
SetEvent
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
IsWindow
MessageBoxA
advapi32
RegOpenKeyExA
oleaut32
VariantClear
version
GetFileVersionInfoSizeA
gdi32
SetDIBColorTable
ole32
CoInitialize
comctl32
ImageList_Remove
shell32
ShellExecuteA
wininet
InternetOpenUrlA
wsock32
WSAStartup
Sections
CODE Size: - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code0 Size: - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 299KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code1 Size: - Virtual size: 258KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code2 Size: 948KB - Virtual size: 948KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE