Static task
static1
Behavioral task
behavioral1
Sample
e82c05fe2949e1d7a47b7e218567def7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e82c05fe2949e1d7a47b7e218567def7_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
e82c05fe2949e1d7a47b7e218567def7_JaffaCakes118
-
Size
189KB
-
MD5
e82c05fe2949e1d7a47b7e218567def7
-
SHA1
8760cab205bf964882a4150e9066534cccfe0dc0
-
SHA256
9fe4068cf08c9c36e14b3c518bdafabdeba4251a67304e95266a7a5972306cf9
-
SHA512
602f4e4ceeb809fcd33799e82ac1895ea46b3a7feea4bf55ea164874d7c691ca3e766f20bde92d3ee4029a8ab742b9ffcf52f505c88b10b18cfe7e39394bc049
-
SSDEEP
3072:7mw153l4XZftOEfG3HyJmDNirbQx5klhuLq56MO3WdmMwUrkc8aWJpXBK/d:6GDE+XyJm5iaQhGq8Mw6wUrkptzRi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e82c05fe2949e1d7a47b7e218567def7_JaffaCakes118
Files
-
e82c05fe2949e1d7a47b7e218567def7_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 812KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE