Static task
static1
Behavioral task
behavioral1
Sample
a781b9ee20d4377b5baf70a4859af413_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a781b9ee20d4377b5baf70a4859af413_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a781b9ee20d4377b5baf70a4859af413_JaffaCakes118
-
Size
9.9MB
-
MD5
a781b9ee20d4377b5baf70a4859af413
-
SHA1
173d90ae32bf034780969fcaa12603f792ea5387
-
SHA256
2a95c80b33ff5b474d97ecdf8a80744ed2366af759b15203f38f615f1c385a8a
-
SHA512
878f2a546ea8b1d5964f7192b3a428e0435a25ed40a9d8b619fa233e6e08d914555c9057b1861f1fc4eabcf02547e0b04fdce7d4f8bbe1b82afd84c78dad3ee9
-
SSDEEP
196608:IfJhVFeNchehPoC8bxPz6gZubw/4yJl7q2/fgdWX:SV60kPorxEb7ym2/YK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a781b9ee20d4377b5baf70a4859af413_JaffaCakes118
Files
-
a781b9ee20d4377b5baf70a4859af413_JaffaCakes118.exe windows:4 windows x86 arch:x86
500ff1538958cc73738bf0c262a1773f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
user32
MessageBoxA
Sections
.text Size: 2.3MB - Virtual size: 12.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.2MB - Virtual size: 17.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 75KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.4MB - Virtual size: 41.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE