Static task
static1
Behavioral task
behavioral1
Sample
a91e89d183709c20a3f643cf5248cf9c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a91e89d183709c20a3f643cf5248cf9c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a91e89d183709c20a3f643cf5248cf9c_JaffaCakes118
-
Size
1.3MB
-
MD5
a91e89d183709c20a3f643cf5248cf9c
-
SHA1
5be908556dc12cd4cf0a5df1190c702ca8b8d312
-
SHA256
1b1f9a90302c6c0deea0dab275f5e35d7f26ab5957e60ca8f676a5b22f40f278
-
SHA512
33cbd47cee3d9ca5f0ff026beecd9a74dc4b5fb43e2e09e68a1fb416466224ee9c47c653cdb6c706fc713add656e2ea4a252ad6a01c2ded8cd602367d271792b
-
SSDEEP
24576:SQZqmdOtTOxeej3ajqbNTVtXOAzhlrJJcEUSdR25osC0eMsh:SS8OryqXvUSjDsC0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a91e89d183709c20a3f643cf5248cf9c_JaffaCakes118
Files
-
a91e89d183709c20a3f643cf5248cf9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
500ff1538958cc73738bf0c262a1773f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
user32
MessageBoxA
Sections
.text Size: 240KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 96KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 19KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 993KB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE