Static task
static1
Behavioral task
behavioral1
Sample
0f2be13b8df20baf320728ebf71643f9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f2be13b8df20baf320728ebf71643f9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f2be13b8df20baf320728ebf71643f9_JaffaCakes118
-
Size
9.5MB
-
MD5
0f2be13b8df20baf320728ebf71643f9
-
SHA1
260d73517474a130a73bb523a22c4971b1fa5d53
-
SHA256
8813a36926729b2bced6ddf70b9de513ce4b42e4875beaef5ede46ed09953cb5
-
SHA512
5928e0764a42dddb0ef7364d41fff4e59deeacc69357c13c672b107952217b2bbbc96f851cd8997dc234aa02f7f58c8231580f31e2de20d0273b37c9f463dab2
-
SSDEEP
6144:sc/k0/NidHWBfK0nf/hLfowZIRd95y5J/aRL6bc9gd7Bfe+Vh:scM0HlF/ZrZIRbQIRLUHG+Vh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f2be13b8df20baf320728ebf71643f9_JaffaCakes118
Files
-
0f2be13b8df20baf320728ebf71643f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
CODE Size: 267KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE