Static task
static1
Behavioral task
behavioral1
Sample
5423a6f341f79d8ac717d8b14b800440_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5423a6f341f79d8ac717d8b14b800440_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5423a6f341f79d8ac717d8b14b800440_JaffaCakes118
-
Size
88KB
-
MD5
5423a6f341f79d8ac717d8b14b800440
-
SHA1
9cfa8dace56e42c4f0658cc3d756139d9a5bce96
-
SHA256
c17c9d475fd823dccd92ce8ec1e13dfc8252ed3810f885683d5619901c901096
-
SHA512
c57be34a4a689c49adc6b80e47cac1cbf6a97e36f8e9e4d7fd4c1f52574fbfd505adb1c32c747bdddcf06e7f7a566728346e8a3e5110c16baad3dcfd6db88579
-
SSDEEP
1536:ihcK+yzt3TiR5lxp/DkitXZJX7PvJB+6wd6lgMvPHNMUPHMWD9MXaL0N9icQ/iPq:ihcK+0te/lxp/DkitXbDjNwd6lp6B29d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5423a6f341f79d8ac717d8b14b800440_JaffaCakes118
Files
-
5423a6f341f79d8ac717d8b14b800440_JaffaCakes118.exe windows:4 windows x86 arch:x86
b8dd9610f7f3c4e817e66f3501bf26f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
� Size: - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: - Virtual size: 466KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Stone Size: 283B - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE