Static task
static1
Behavioral task
behavioral1
Sample
08a7ac74367b0e121163b08c199f9c36_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
08a7ac74367b0e121163b08c199f9c36_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
08a7ac74367b0e121163b08c199f9c36_JaffaCakes118
-
Size
172KB
-
MD5
08a7ac74367b0e121163b08c199f9c36
-
SHA1
3052cb646cc506fc45a8081e5857b4840beb655b
-
SHA256
0e327a321391be5ed81ac0a5f6ec4efa914710762972afd210ef80b680ebd961
-
SHA512
fad85d76caa24d1746cfeeeddbb3ccb9b9eac207f8109aa2d449797d96844b8c65fda582119f7e4e48d5192f31864d01b777e2258eb980f5827cd7f4ef4b8071
-
SSDEEP
3072:VBgprGbj6gFqY1VambDW5XE0ezN9GpeMnSzUbmO8M2utsXGzaM:MpqtVa2DWuzxRMnSzWTd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08a7ac74367b0e121163b08c199f9c36_JaffaCakes118
Files
-
08a7ac74367b0e121163b08c199f9c36_JaffaCakes118.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hw6kes6t Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
j62uoh9m Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1zomu74z Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0v10u4yi Size: 162KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
86e2hwkr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ