Static task
static1
Behavioral task
behavioral1
Sample
c098ac6286eb66a5c852764ca6ccd4f1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c098ac6286eb66a5c852764ca6ccd4f1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c098ac6286eb66a5c852764ca6ccd4f1_JaffaCakes118
-
Size
192KB
-
MD5
c098ac6286eb66a5c852764ca6ccd4f1
-
SHA1
fb255f1a9b693c517d2f570febadcf506bc63f8d
-
SHA256
324e05c1e47aced1ef618445a8b8355f1d15ac0ec3e73099830a65b0df680686
-
SHA512
7b49f4ee24b8bbeee6094be1d726ebb2be0da4e52edf932227ea68bc644fe08cb612fd73f51a02dcb68508e3cc474b68f91fe78578718c9257408b7a1392a5d5
-
SSDEEP
3072:nY1enSwurICOmlGZOmo0TG4iQ621BHWa/uqMhUXNk3G4ASYjQ9QHv3:AXrIC2EmBTlL/usXazQP3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c098ac6286eb66a5c852764ca6ccd4f1_JaffaCakes118
Files
-
c098ac6286eb66a5c852764ca6ccd4f1_JaffaCakes118.exe windows:5 windows x86 arch:x86
fdbfec85672f73d2a4d49635454936d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
user32
MessageBoxA
Sections
.text Size: 59KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE