Static task
static1
Behavioral task
behavioral1
Sample
f9a24f7e6ab3336d35522b7d2d7f28ac_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9a24f7e6ab3336d35522b7d2d7f28ac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9a24f7e6ab3336d35522b7d2d7f28ac_JaffaCakes118
-
Size
27KB
-
MD5
f9a24f7e6ab3336d35522b7d2d7f28ac
-
SHA1
0db1f6138848eb547cf6c3b978b6bbf1b3181761
-
SHA256
1e7efd2a7f75aecc79a52c1d926be1f2c8819fbbd2efb777774837f97b6e50b6
-
SHA512
8ff1541882df0ed690d20554bceae717955fd87188ce16dc9dc2be3fc2a0953e442f9d7f26cdd738d6eaecd1fa4ea521f44978313d18027fcdb4ec17ade3d793
-
SSDEEP
768:bSmk4fSDbUVphCCEG1VmwsDblw9XJpjkhuFuWZ:JobUVpzpVmwsFw959wcZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9a24f7e6ab3336d35522b7d2d7f28ac_JaffaCakes118
Files
-
f9a24f7e6ab3336d35522b7d2d7f28ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c2d3c56017ffc9f272aae4a4d190dcc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
MessageBoxA
comctl32
InitCommonControls
Sections
CODE Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taz Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE