Static task
static1
Behavioral task
behavioral1
Sample
ad8ef474beeb50deeb36511877c18699_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ad8ef474beeb50deeb36511877c18699_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad8ef474beeb50deeb36511877c18699_JaffaCakes118
-
Size
206KB
-
MD5
ad8ef474beeb50deeb36511877c18699
-
SHA1
145d9ec3f24fd7da8dc2da980d2b94535e329908
-
SHA256
4b76285aaee8094d7e34f6e9b80420413d1653cf31160293c3f310ae73e9011d
-
SHA512
0b341f9efdd1cf6a35d0dfb80399af3288e914c73120d5fe541e37f5a96edc8256965d6cd5c4ac8342865d15ff57811df625015311c06b1cd98e36b455a3398e
-
SSDEEP
6144:CxX6g+i6tED5gO0LmZ1Bd6n6mP/qWL2vn:CkTmL0LMP8ZHqx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad8ef474beeb50deeb36511877c18699_JaffaCakes118
Files
-
ad8ef474beeb50deeb36511877c18699_JaffaCakes118.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ya2d.5gm Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ype8rfwf Size: 192KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3d0lg51y Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ