Static task
static1
Behavioral task
behavioral1
Sample
a5c3e7f1ea21b7d3c29c6e1131e9d493_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a5c3e7f1ea21b7d3c29c6e1131e9d493_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a5c3e7f1ea21b7d3c29c6e1131e9d493_JaffaCakes118
-
Size
323KB
-
MD5
a5c3e7f1ea21b7d3c29c6e1131e9d493
-
SHA1
2a652d4645473e39486a3bd289ce7b5b54b7fbcd
-
SHA256
c19e0007417485e50028b3bc324481d4de3ed5dd4427660b616eab17915275ef
-
SHA512
78620ab87608535ca7f306744b0a2da50f9a98ac849d2d6739388476c26afe2f70e3f1fdc6abaceeb8e51efbdebe5fe0d942d9c0555e69559e24f339b0de9d1c
-
SSDEEP
6144:0Omacef0270jP+1vvhEUXwjk+X7GNEGhrs3wTzXnbL4v5zQxN:FRtf02g6vvhFwwi7GNv1SIrbL4x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5c3e7f1ea21b7d3c29c6e1131e9d493_JaffaCakes118
Files
-
a5c3e7f1ea21b7d3c29c6e1131e9d493_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
.text Size: 221KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE