Static task
static1
Behavioral task
behavioral1
Sample
cef6c731dbabebce36987683a64b0ec0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cef6c731dbabebce36987683a64b0ec0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cef6c731dbabebce36987683a64b0ec0_JaffaCakes118
-
Size
57KB
-
MD5
cef6c731dbabebce36987683a64b0ec0
-
SHA1
f4b1a67b00e23bb0c28815154fe9f9feefca72f4
-
SHA256
2a82a6b34e10fbbd2e5ef3bcbf4daa26374d1ebdaed6dbb69611b836a9d99099
-
SHA512
b808faf266fc9d2d304a69c4029f215c13de0d66224c71d87bb75c57ef46160dc8a2ad572530d940f780d6969425b164d62cbd0119336855aaca1378c9dade9c
-
SSDEEP
1536:1/u/nPURQME2oJgwXULBc7/qZCG/Eda4B4s+bP2UWs1B:1/YPsQjgl9SCZR/EdLB02UWs1B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cef6c731dbabebce36987683a64b0ec0_JaffaCakes118
Files
-
cef6c731dbabebce36987683a64b0ec0_JaffaCakes118.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.packed Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.11ca92r Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pmslbc1q Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
77qaaxeb Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
b7apsvcy Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE