Static task
static1
Behavioral task
behavioral1
Sample
f244baedd69f7a17d6cfd234fff5bd17_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f244baedd69f7a17d6cfd234fff5bd17_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f244baedd69f7a17d6cfd234fff5bd17_JaffaCakes118
-
Size
110KB
-
MD5
f244baedd69f7a17d6cfd234fff5bd17
-
SHA1
bb416885d0aff19d10d78121427254ae6c294409
-
SHA256
5576a533135c225f3a559bf09d814fc762523001499e46c3ba8b9b1c6e2ed72a
-
SHA512
e276800a794bf73e5135bf74047a71a46ab3592d056f47f35e6bb96b9b5027e5dcbd5e340f8e20e80df68e7891b044eefc6eac1f9a7f146abd8e64d14cd68f05
-
SSDEEP
3072:+4usXYh9ZDSasYvek3cFHBchOi3/w1QM/ogqm:qEKZmdHBcEi3/wPf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f244baedd69f7a17d6cfd234fff5bd17_JaffaCakes118
Files
-
f244baedd69f7a17d6cfd234fff5bd17_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e0b836e77c52d178eec045693ba9486
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
user32
MessageBoxA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ