Static task
static1
Behavioral task
behavioral1
Sample
02844e09238e98e069a51aeb7baa77fc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
02844e09238e98e069a51aeb7baa77fc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
02844e09238e98e069a51aeb7baa77fc_JaffaCakes118
-
Size
3.1MB
-
MD5
02844e09238e98e069a51aeb7baa77fc
-
SHA1
be66278ab271c7c1ee7e4f09c9f87bd980026081
-
SHA256
5b1eb9494bce2884dabff0fea185e5ca71de7fd1522607d5dede4cff2e3831e8
-
SHA512
1a618df492efe948f4f93b7be6c2d2de6a7878a080a6b5401f47d216a4985ac21910d7070668c91b642b4abf3c8176bfa571092a6b5e539eabc2d23470d5da2c
-
SSDEEP
49152:+kwiTIwd4QzAdbq3m48WtspK6Vys+hlD7AB4VVFR9WOT074Sww:+xknb8J+hJQww
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02844e09238e98e069a51aeb7baa77fc_JaffaCakes118
Files
-
02844e09238e98e069a51aeb7baa77fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
65b6862e9898b195f4ef7a1685fd82dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
memset
comctl32
InitCommonControls
user32
MessageBoxA
shell32
ShellExecuteExA
ole32
CoInitialize
Sections
. Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE