Static task
static1
Behavioral task
behavioral1
Sample
a36c3272a8a9bbabcfe0813c28c4c747_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a36c3272a8a9bbabcfe0813c28c4c747_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a36c3272a8a9bbabcfe0813c28c4c747_JaffaCakes118
-
Size
51KB
-
MD5
a36c3272a8a9bbabcfe0813c28c4c747
-
SHA1
719537796a4ad86ec2678c2eedc10d8883c6f039
-
SHA256
7c9e1382bc0153cbcb3c978246932f281fb85af8e76bc333701996b17fb589a8
-
SHA512
3e4a50661c92f03ae270c23b7b5f8fe3a8c53a78549ed58c45958cc9cf4e9e2009c59d901eb0aa5df1961010c219b60c3be1656e8ef3e4a8670c842b345cea56
-
SSDEEP
1536:G7+BSFVnOQTu6Vy+HU1Cn+vfl8/r+RtlBU:G7eS/BuwHbn+18z+RxU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a36c3272a8a9bbabcfe0813c28c4c747_JaffaCakes118
Files
-
a36c3272a8a9bbabcfe0813c28c4c747_JaffaCakes118.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hi.5noj2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
huttf6ct Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE