Static task
static1
Behavioral task
behavioral1
Sample
a426bc6881fd9fc8f6788f9db52f68f9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a426bc6881fd9fc8f6788f9db52f68f9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a426bc6881fd9fc8f6788f9db52f68f9_JaffaCakes118
-
Size
9.0MB
-
MD5
a426bc6881fd9fc8f6788f9db52f68f9
-
SHA1
11100abb8ba146ba18066736c4753775f2925b31
-
SHA256
cf3d1cf312ae5f6d5ad0a9030ab7148c8a5c85968482632f724fa0847b59b5f2
-
SHA512
88bff9cfca25525c1abfa76d80773a9c342a72a99ed663a5524c6dea6d9e53643feae93e1fa079e482eef35068f6c10b2241f51a17dd2a73d192b95ccae75107
-
SSDEEP
98304:oUUFZhvUF5nZRhPebHOcYwp6JlTgv76T1VmQ7a8Dq:uZh25nZXPeHOcYwp4sGpG8Dq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a426bc6881fd9fc8f6788f9db52f68f9_JaffaCakes118
Files
-
a426bc6881fd9fc8f6788f9db52f68f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4dpjm3ex Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8.0MB - Virtual size: 8.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
r77lnznt Size: 522KB - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mpmtr9pb Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ