Static task
static1
Behavioral task
behavioral1
Sample
a7998126245d1f5a846e0c413114e3d5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a7998126245d1f5a846e0c413114e3d5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7998126245d1f5a846e0c413114e3d5_JaffaCakes118
-
Size
186KB
-
MD5
a7998126245d1f5a846e0c413114e3d5
-
SHA1
df93847f146da18d075c38ef0115ed58b45bb6ea
-
SHA256
1debb6e911ac1924d8860e92f21807785c1c46920138726b0a017067b96b8d58
-
SHA512
194e8dd948129709a3dae97e27961f4c8a2d1b689b8460b561bca4a9dd3a1106858f4885bba1554289e4d1d884094ce2d40fbe1c83d0233ff1d415a374d824a4
-
SSDEEP
3072:q0uTbJ0E0O3E2lBF3T60L0gJseQUBKcTVjIZmXtMFo7td0LY8mQhOmZrTs:q0uW2ZpFyU4UhIZmXiK7Q/OWU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7998126245d1f5a846e0c413114e3d5_JaffaCakes118
Files
-
a7998126245d1f5a846e0c413114e3d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7t7lszjs Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lge7.n9x Size: 84KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ulxj8bn4 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ