Static task
static1
Behavioral task
behavioral1
Sample
def235a7ae61508ff0910a3a483b4553_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
def235a7ae61508ff0910a3a483b4553_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
def235a7ae61508ff0910a3a483b4553_JaffaCakes118
-
Size
147KB
-
MD5
def235a7ae61508ff0910a3a483b4553
-
SHA1
a98816af56044dbbfe674aa15b9d7afa14bd5905
-
SHA256
78232cb68e31e92981a4ebb51435df23192daa2c367839f8758e42467921f043
-
SHA512
c135677591598e41fab748c173bdfb5745ab48303ba48b52a6e5d0b227ffcfd62d234c7a4451b1d6a2ccc070ba0a40ee25681a3c27842a6190ac1f7602130b9c
-
SSDEEP
1536:LYTnGFn53R648CrEpiVaj5OYKLC8xhW2ltxulmYlqxorTreKBGtVvvqbabFRZdUW:cTGxHUH3NQMlpkxor32ibuRZGY8PYSy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource def235a7ae61508ff0910a3a483b4553_JaffaCakes118
Files
-
def235a7ae61508ff0910a3a483b4553_JaffaCakes118.exe windows:4 windows x86 arch:x86
46b0675c1fd7681c7b19a1c83d5aff83
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
user32
wsprintfA
MessageBoxA
Sections
.data Size: 1KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_rsc Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ