Static task
static1
Behavioral task
behavioral1
Sample
b34bb1f0ba297b706c41331c5aa6e40f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b34bb1f0ba297b706c41331c5aa6e40f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b34bb1f0ba297b706c41331c5aa6e40f_JaffaCakes118
-
Size
595KB
-
MD5
b34bb1f0ba297b706c41331c5aa6e40f
-
SHA1
f0c9f72c4e80095352892e2a872d4dc7d3ad067d
-
SHA256
1b48c69033544da0c33a7ec3c83a70dd38db07738af7ec29067f43daca51355d
-
SHA512
035bc64df1a715c319690e07404098fc3acb6a0aeed68e541ca5c7db51c1e17eeac789bbf7e42f0c91b24552fee041dc53e6845cd286e03ac5d18195b40bdca1
-
SSDEEP
12288:1k2g0ZpmEXHlC+S3YKSk2g0ZpmEXHlC+S3jf:S0y0HlC+iL0y0HlC+i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b34bb1f0ba297b706c41331c5aa6e40f_JaffaCakes118
Files
-
b34bb1f0ba297b706c41331c5aa6e40f_JaffaCakes118.exe windows:4 windows x86 arch:x86
acd9fa3a74cc4c1d92998e6ad62eeb8f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA
user32
wsprintfA
MessageBoxA
Sections
.CODE Size: - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 254KB - Virtual size: 254KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.HackSA Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 330KB - Virtual size: 330KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MissWe Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Root Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE