Static task
static1
Behavioral task
behavioral1
Sample
ff0dfb01c4d2e1ce10bc65743c7cab78_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ff0dfb01c4d2e1ce10bc65743c7cab78_JaffaCakes118
-
Size
94KB
-
MD5
ff0dfb01c4d2e1ce10bc65743c7cab78
-
SHA1
2a800b6e04d177876c1e747b275c089aba61fa00
-
SHA256
45bdd5fe2be6df44a94756b03bd6f7f9af29f11efafd90f79cc82232c522c91f
-
SHA512
b068b74cf84ea0f3a806996f6d91e4d2523b1dc16fa45f93d327b9a7890c2f9eb03255d21b4eb9517388c0eea888c463b84ef8b06dbdb471123987b8367cf38a
-
SSDEEP
768:/EzQE2+b7B1T4t7vI2NiN+U4ZmTX7CaKf+ibj55VTQ1RBkMoas0Qz3FGnuYoEq:/235b7vkmVN+1e3c+ibV561RBhoB1Eq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff0dfb01c4d2e1ce10bc65743c7cab78_JaffaCakes118
Files
-
ff0dfb01c4d2e1ce10bc65743c7cab78_JaffaCakes118.exe windows:4 windows x86 arch:x86
2a37aab13b28bd4b2d1cf6aef5c561f8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
LoadLibraryA
GetProcAddress
user32
DispatchMessageA
TranslateMessage
GetMessageA
Sections
.text Size: 1024B - Virtual size: 942B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 314B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ukqzqza Size: - Virtual size: 72KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE