Static task
static1
Behavioral task
behavioral1
Sample
f3c1f3e405b0dfa5f6f3a9d45192573b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3c1f3e405b0dfa5f6f3a9d45192573b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3c1f3e405b0dfa5f6f3a9d45192573b_JaffaCakes118
-
Size
47KB
-
MD5
f3c1f3e405b0dfa5f6f3a9d45192573b
-
SHA1
74b1cb0da1c122f7ca4c093c4bacdef9f4ebe2a6
-
SHA256
6e6b10d493e814f45088e337d49af8eff18445a9e0d08350bfb3b1f4f6c9f44a
-
SHA512
0535ce4ef289f4ef4a33695c37234a0bc00e264e9506e6b34fe229e6bddd318dc5f12c03e54b44422f5a51ce013388f7a1fc53e81f81ab48839ba3013e3c2b98
-
SSDEEP
768:lDO4+dbNQtC7N8xuweB+HlPXtI+kIYQVmt2YXyVLaV0dBSaEh:Np+dbF7N8x/egHlPXt5YobYh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3c1f3e405b0dfa5f6f3a9d45192573b_JaffaCakes118
Files
-
f3c1f3e405b0dfa5f6f3a9d45192573b_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
Size: 18KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE