Static task
static1
Behavioral task
behavioral1
Sample
f6a850ddc42324f9ca8cebd57d8cab5c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6a850ddc42324f9ca8cebd57d8cab5c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f6a850ddc42324f9ca8cebd57d8cab5c_JaffaCakes118
-
Size
15KB
-
MD5
f6a850ddc42324f9ca8cebd57d8cab5c
-
SHA1
0a06a999de24e23c9494e27525249764a851eff4
-
SHA256
4947c3a0eb4c0cc76b5a4234458348ec40cf905faa94dd75ad82b907021d8085
-
SHA512
f3136748427965496ab7563b31675ad1aa40fb242584df8246ed058f3225b3e151927a99b0dc41f4d599113e315b79f9e49f8885217ef9954468f10a440cebcd
-
SSDEEP
384:2IYONfcY0EO5W81B5Aap2uNYRtj1JetgfK:nxfmk81TJeRN1I6f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6a850ddc42324f9ca8cebd57d8cab5c_JaffaCakes118
Files
-
f6a850ddc42324f9ca8cebd57d8cab5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
46b0675c1fd7681c7b19a1c83d5aff83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
user32
wsprintfA
MessageBoxA
Sections
.data Size: 9KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE