Static task
static1
Behavioral task
behavioral1
Sample
e3664ebb55203a64ce653e9e24f42c94_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e3664ebb55203a64ce653e9e24f42c94_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e3664ebb55203a64ce653e9e24f42c94_JaffaCakes118
-
Size
287KB
-
MD5
e3664ebb55203a64ce653e9e24f42c94
-
SHA1
c114ecdecf28ce2dda58ee91f7991713b23d9bf6
-
SHA256
843204454b03cdb889c6fe9f5138c6839bbb437790ded86297e4a430cd2db626
-
SHA512
0421298e16b56309561c816025b77e4490c3a86455081b7e4742e0ad383d9582ede36d233720719ff26cd5811f78cf68ed9ca8d75746d29bee95d10916555e5a
-
SSDEEP
6144:HlXqOPWOg9YylMQlHtvVrdP4ss0mMlr6RCG4ugjd6plt0:Hl6OaYylVNtvP4f0ACTuWIK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e3664ebb55203a64ce653e9e24f42c94_JaffaCakes118
Files
-
e3664ebb55203a64ce653e9e24f42c94_JaffaCakes118.exe windows:4 windows x86 arch:x86
acd9fa3a74cc4c1d92998e6ad62eeb8f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA
user32
wsprintfA
MessageBoxA
Sections
.data Size: - Virtual size: 728KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 247KB - Virtual size: 247KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE