Static task
static1
Behavioral task
behavioral1
Sample
fe38461c5d4b110018a32e298fc14038_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe38461c5d4b110018a32e298fc14038_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe38461c5d4b110018a32e298fc14038_JaffaCakes118
-
Size
85KB
-
MD5
fe38461c5d4b110018a32e298fc14038
-
SHA1
bc5c1867ce551421e74e834a8677e54a24e956a6
-
SHA256
9f4ee0bb799fc185dea5233d4f7c87f015b2b6e3d92163b462c94c4c3d833536
-
SHA512
9173ac365accea888bdb6b72c4fee0667a296a74380fb488d08449dc24b485157dcddb6f12727fa97c5b5d39a75781691a5dbf58e609c8f06c92034caf8c20c6
-
SSDEEP
1536:cNJ+WJu83Hs3FbbVkdoGQr84sIID8PkGcEE+Zt3QaN9iMhQtsJ2gJTXOuU:cDXJu8KbbVKQrlsMM3Ept9NNi62gpOuU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe38461c5d4b110018a32e298fc14038_JaffaCakes118
Files
-
fe38461c5d4b110018a32e298fc14038_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
.BJFnt Size: 52KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE