Static task
static1
Behavioral task
behavioral1
Sample
f85ffb0bca553b27f594b50f12b0ff1d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f85ffb0bca553b27f594b50f12b0ff1d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f85ffb0bca553b27f594b50f12b0ff1d_JaffaCakes118
-
Size
20KB
-
MD5
f85ffb0bca553b27f594b50f12b0ff1d
-
SHA1
7344097af01785da4681e1c4c89401e0eae70f07
-
SHA256
58df1a281d94f0a98d513291e2cd30cd70a61a8087210254f6e1959171bafb15
-
SHA512
ff6f8ec34890d3e01364f0151f9fc28bd2a4bac4315a47abea5203d41c880b9cfe2a25114e7999379323a6d7cbddff7017ae9c3d425dec8c4ad9789070681d30
-
SSDEEP
384:g9WzygBq0SNWNhv57tKeC6rIvtfBofrQGb7pL7zeWi9qGfGVdlmB:EjgBWNavZtKeC6k1Zsb7pL7C3fYI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f85ffb0bca553b27f594b50f12b0ff1d_JaffaCakes118
Files
-
f85ffb0bca553b27f594b50f12b0ff1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE