Static task
static1
Behavioral task
behavioral1
Sample
aa7a75679c68eba3eb1167ba02000382_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aa7a75679c68eba3eb1167ba02000382_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aa7a75679c68eba3eb1167ba02000382_JaffaCakes118
-
Size
430KB
-
MD5
aa7a75679c68eba3eb1167ba02000382
-
SHA1
187bc1554f802edfac0c34953176b0eca294560f
-
SHA256
b9be341d2037ac3f6a7b96d45c1b7abb7015214021ff86edc1dfd8523a0a176e
-
SHA512
c01ce38e9f904142d20005fb0eb5c833f2d4d33bde0a442e679ca34dea13eac2e8957a509005853fc4dea223029a79006e9701b098e92d80eb8cceef3cb51608
-
SSDEEP
12288:aclVlxu3BwuFRf1tprKPQnyWlR+pn6CzghbxDeX0:y+uFRf1tprKey6Epg1xJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa7a75679c68eba3eb1167ba02000382_JaffaCakes118
Files
-
aa7a75679c68eba3eb1167ba02000382_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c372311534116eeffdf56f3f6c69c5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
ExitProcess
GetProcAddress
user32
wsprintfA
MessageBoxA
Sections
.text Size: 44KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 369KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lOAD Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE