Static task
static1
Behavioral task
behavioral1
Sample
b601358b340fce9a5be654e1ba5fdcf2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b601358b340fce9a5be654e1ba5fdcf2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b601358b340fce9a5be654e1ba5fdcf2_JaffaCakes118
-
Size
1.0MB
-
MD5
b601358b340fce9a5be654e1ba5fdcf2
-
SHA1
e50de7267ac91564c4051a5e9d396882f6ba2b94
-
SHA256
c20c805dba130453bc3d90250243c4e9f76d2a375ed57c0b7e0a56c4ebae5458
-
SHA512
644b211870a7856cdf34978dd67a9ad2629b23a0645bba2af2fb80aea6b665834a68f31515ae355262069591f6f5e7675df9efefc951e6435e523f42be28f955
-
SSDEEP
24576:rJSFhZJCl1iMuCeSyL/gx6nAr8XhzoH0ayRPNl:QBJN/jAIt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b601358b340fce9a5be654e1ba5fdcf2_JaffaCakes118
Files
-
b601358b340fce9a5be654e1ba5fdcf2_JaffaCakes118.exe windows:1 windows x86 arch:x86
f81d43832b04fcd52bf053c9e75e5e61
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
LoadLibraryA
GetProcAddress
GetModuleHandleA
VirtualAlloc
user32
MessageBoxA
Sections
.DATA Size: 1KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FORTH Size: 1.0MB - Virtual size: 8.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE