Static task
static1
Behavioral task
behavioral1
Sample
fe2640d8ffe659489895dc5338811f02_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe2640d8ffe659489895dc5338811f02_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe2640d8ffe659489895dc5338811f02_JaffaCakes118
-
Size
1.1MB
-
MD5
fe2640d8ffe659489895dc5338811f02
-
SHA1
42d5d9fb65d57032187468cc2d0102d52d964145
-
SHA256
6b902876e680fa572315b29b8ac05c6479592a2d77c293dd9888ad3ca961c70c
-
SHA512
15388cbf94f756b7cb6796b5bb5aefaed80cb4d3c2ca765ba29c881fc0105bc5eae7d8f86b2de9cfc31cbd05ad133f787fc49efbc37b5e4605392c57b5bcba57
-
SSDEEP
24576:b++4qSzg74so+U3fCFWUJffVFxRSWMAwgAZ0yDmU/:b46UBfsTJnV9SWpXJGmA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe2640d8ffe659489895dc5338811f02_JaffaCakes118
Files
-
fe2640d8ffe659489895dc5338811f02_JaffaCakes118.exe windows:4 windows x86 arch:x86
fdbfec85672f73d2a4d49635454936d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
user32
MessageBoxA
Sections
.text Size: 48KB - Virtual size: 383KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 644KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 449KB - Virtual size: 449KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE