Static task
static1
Behavioral task
behavioral1
Sample
43c435383d255f3b433b0c7e131dc1a1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
43c435383d255f3b433b0c7e131dc1a1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
43c435383d255f3b433b0c7e131dc1a1_JaffaCakes118
-
Size
179KB
-
MD5
43c435383d255f3b433b0c7e131dc1a1
-
SHA1
7682e37458eb632848d69b0dd6d2ab86f42f11de
-
SHA256
75a06cc710071566cce4446bf403faf0179a62b0037704840ffdd643b98c37de
-
SHA512
27d0ea12d4d2d30be845b9bc53c689bc1f71bd58587c1b2c2e880f1f496227db602e71b5eb5a0f4dc3f92780ed597aa0aa42dedcb4d2047fe0563fd9673255f3
-
SSDEEP
3072:9uCbCmD0uxA+mFX5HFmmrXIK7yTjZaDkb/I7QLRRmkZ5gOaTzcu4T:9uWxvmV5drzyvZR/uQLR3Zu3zcu4T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43c435383d255f3b433b0c7e131dc1a1_JaffaCakes118
Files
-
43c435383d255f3b433b0c7e131dc1a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1rev0niu Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lwxngnf3 Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
f0.j0plf Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ