Static task
static1
Behavioral task
behavioral1
Sample
beae9e65fbf29fa468eb3316c407a598_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
beae9e65fbf29fa468eb3316c407a598_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
beae9e65fbf29fa468eb3316c407a598_JaffaCakes118
-
Size
69KB
-
MD5
beae9e65fbf29fa468eb3316c407a598
-
SHA1
5845ca7849dee1ddcf988a456bd7355997e630fc
-
SHA256
6f07023d5c878e0ae6a100b2c78164f76ded1284fea83951e0a0037a758dad9a
-
SHA512
bf4003fe98ad1b6d3ea97ef4e8ed6eca0a43d80b61b1e9f017d9f6fdd9126c3db8bba66159cbabdfaec18de2ee6ff0525b8beaa8ae746b19e4156374e967c9c8
-
SSDEEP
768:lYk37iza2AXzeu/jvt/HNkZtUN0VgFp/wDbISH0bpi7/Tlo88MqrdH5XNTVMxVBY:lYCODQd/pyU+VgFpYDESUEuvjVnV2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource beae9e65fbf29fa468eb3316c407a598_JaffaCakes118
Files
-
beae9e65fbf29fa468eb3316c407a598_JaffaCakes118.exe windows:4 windows x86 arch:x86
d5e0355f8764c235b38759b860077ceb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
user32
MessageBoxA
Sections
.tls Size: 42KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.txdata Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dotfix Size: 2KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE