Static task
static1
Behavioral task
behavioral1
Sample
fc82349eb882037314cbe2b79e24bd1d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc82349eb882037314cbe2b79e24bd1d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc82349eb882037314cbe2b79e24bd1d_JaffaCakes118
-
Size
356KB
-
MD5
fc82349eb882037314cbe2b79e24bd1d
-
SHA1
e9568bbb6d7f3629e4a92d1b6b14f8f20b764f35
-
SHA256
d81aa2c7305b95e420221e855050f59025ea29a6bcaeb24f00d25ec8fe3d0e47
-
SHA512
ed4aabd2a4adb43d70a714d8717d9b7cf37ef18b790a92ae6fbacf80dd654f530f389a193eae613ad3127d29dfd814bdf718260f2b0a0c84b5092a5006b7af71
-
SSDEEP
6144:8YEMqb3YC4X+qN0agxKuWAyCSC5Fznr85znSlYb/XEzggUHBS1lli6I7VCYrE:iMcX4XmxnHp5Frr8hSlOPWgnhUliF7X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc82349eb882037314cbe2b79e24bd1d_JaffaCakes118
Files
-
fc82349eb882037314cbe2b79e24bd1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
Size: 314KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE