Static task
static1
Behavioral task
behavioral1
Sample
d6db9e8a17814f5cb4ffc703a9f7b249_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6db9e8a17814f5cb4ffc703a9f7b249_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6db9e8a17814f5cb4ffc703a9f7b249_JaffaCakes118
-
Size
259KB
-
MD5
d6db9e8a17814f5cb4ffc703a9f7b249
-
SHA1
d00bb30464d79f7412b3cfc2c6d2449e837d4be6
-
SHA256
62f7b3663f6458a18481ddfb4bf2e068d2b6e6442649656cca0ff34dbcea409c
-
SHA512
ed5c9835495694445298c4d6750e8e02ca64db48d885bcc7cc529d18cd3820798517ec7b76942ac190eaa3d7332ee9ba5a2e76d7ac178a6be21278ef3a32e2ed
-
SSDEEP
6144:BMZwOMbtofsrrXBh5b7jzyQ7YxgDvVV3la:GZwOM3f3hPzyaYGVt0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6db9e8a17814f5cb4ffc703a9f7b249_JaffaCakes118
Files
-
d6db9e8a17814f5cb4ffc703a9f7b249_JaffaCakes118.exe windows:5 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 137KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sm0ptuwi Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3gsy0rtw Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eha.uxc1 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
o2wh4aaj Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4tg66nyt Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ