Static task
static1
Behavioral task
behavioral1
Sample
a503fa6ec3172d0261bbb6de4a47e4a8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a503fa6ec3172d0261bbb6de4a47e4a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a503fa6ec3172d0261bbb6de4a47e4a8_JaffaCakes118
-
Size
1.1MB
-
MD5
a503fa6ec3172d0261bbb6de4a47e4a8
-
SHA1
09aab07ba7cfc727af60c8e6a7a4cff02ca57eb7
-
SHA256
91906b4164afbe83a1b02b413bf5fd56e4905fcb3c7c79c513483acad24f747a
-
SHA512
3b5dc2b2b15ce834a87a1c3f88dc4cca2a16e1aa97a50dfe4225a3c0edeceb0925c504967d152ea94c4f386f5b3d495576522decd9f5b126a4c4ad9fb5d36a15
-
SSDEEP
24576:okMVFB/FQ1oACr5N89OLGZRWzu3JjDgTAKei7NRH+:Gj8ovqDMu3dcNeMNp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a503fa6ec3172d0261bbb6de4a47e4a8_JaffaCakes118
Files
-
a503fa6ec3172d0261bbb6de4a47e4a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
c190923154835647cbb8a85352a18188
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStrings
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
user32
RegisterWindowMessageA
gdi32
SelectObject
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
advapi32
RegCloseKey
comctl32
ord17
shlwapi
PathFindExtensionA
oledlg
ord8
ole32
CoRegisterMessageFilter
oleaut32
SystemTimeToVariantTime
wsock32
socket
Sections
.text Size: - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 434KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.a0 Size: - Virtual size: 506KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.a1 Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE