Static task
static1
Behavioral task
behavioral1
Sample
f690d5688b795318ec7adcfe7424940b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f690d5688b795318ec7adcfe7424940b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f690d5688b795318ec7adcfe7424940b_JaffaCakes118
-
Size
367KB
-
MD5
f690d5688b795318ec7adcfe7424940b
-
SHA1
839f689527dad783e4eca7724ba9cb44034376cd
-
SHA256
da1de02936a07f028ac09975400a433fc2d4c737e8ebe1efe07f507ded3bede8
-
SHA512
1402e6d9e34127f3280db5b19fbeaea17799ef2982d20569585a86b524a7c376267037ff67782a9691bf05cb891dfae950147913e350a1d2647f6900b50a471e
-
SSDEEP
6144:rOrnOujPz+RLMgG+f8HOAUWtn4CI7anBpyDtK6nTY2voC:raOuX+2qEH7nn4+nXyuC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f690d5688b795318ec7adcfe7424940b_JaffaCakes118
Files
-
f690d5688b795318ec7adcfe7424940b_JaffaCakes118.exe windows:5 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
s7.ghqzo Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
m9jp7pjh Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
n21bmppf Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ykab9v6c Size: 294KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
newar9e9 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ