Static task
static1
Behavioral task
behavioral1
Sample
f207b8c689cab67a313d08416642e992_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f207b8c689cab67a313d08416642e992_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f207b8c689cab67a313d08416642e992_JaffaCakes118
-
Size
22KB
-
MD5
f207b8c689cab67a313d08416642e992
-
SHA1
d315ba4aa1ec6e8c0bf3a08049a799716bc98e44
-
SHA256
149329fd1d45fdcfb97ab67cdf1127e1d13255f641e65cb336f51d22f7349c5e
-
SHA512
3b366c4b7fac492d5245f7f74ac136d48675ec6e661c40603622c34daf8612c04b3a94949e83e63df9c3370c9cab3a601c7dde7d2533f46a40ae3596cae77ac8
-
SSDEEP
384:MPMnnXQxEaHO4ASqcOcbXA/l1dQWwMJaFEjecAmkGusakFavtR8SHz9iW6uA:Axpu4rq8bXA/7dKFESpYakFavLAW6P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f207b8c689cab67a313d08416642e992_JaffaCakes118
Files
-
f207b8c689cab67a313d08416642e992_JaffaCakes118.exe windows:4 windows x86 arch:x86
744839b78e42c5a8f8eb2dde6822cfed
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
select
kernel32
CreateEventW
user32
MessageBoxExW
gdi32
Chord
advapi32
RegCloseKey
shell32
ShellAboutW
Sections
.text Size: 1024B - Virtual size: 970B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ