Static task
static1
Behavioral task
behavioral1
Sample
b34bb4c597e405bea1a08e494a9a3524_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b34bb4c597e405bea1a08e494a9a3524_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b34bb4c597e405bea1a08e494a9a3524_JaffaCakes118
-
Size
78KB
-
MD5
b34bb4c597e405bea1a08e494a9a3524
-
SHA1
ce5c2b056ace2b1a108d57684a04e574e40ae1ef
-
SHA256
a8bba78b1bc5b83d9ff9530bd76fc3b8cb88cc2afe9d98ee3180180083be74a8
-
SHA512
c17bfcacb9fd34e8a9c180d9c48a14b8ddeaa3b85e501499cee9d21c55f9774ff5963af3d9552e702f634e03f67258747076515426459960538a11ec8fa62d31
-
SSDEEP
1536:tgVY/+4MdtSkLGuEVOG50QYsX1XgpLHn9sOKzw1HWxqmQnCZmsJ5:i2/MbSkLGuEVOtQYsXlgFH9sOK42xqmX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b34bb4c597e405bea1a08e494a9a3524_JaffaCakes118
Files
-
b34bb4c597e405bea1a08e494a9a3524_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
.BJFnt Size: 45KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 7KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE