Static task
static1
Behavioral task
behavioral1
Sample
f99463f5c88160ade3e9f8be6f7f742f_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f99463f5c88160ade3e9f8be6f7f742f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f99463f5c88160ade3e9f8be6f7f742f_JaffaCakes118
-
Size
85KB
-
MD5
f99463f5c88160ade3e9f8be6f7f742f
-
SHA1
a763e60e3fd404aafcbecde3bba14ee674b7419c
-
SHA256
a79c232e7f69bf4b2db2f4cddd4568ba6f16eada19c8086df30db96281e9e2fb
-
SHA512
b5f63caa1f22fcd6bf9490b71ada5a31bc10985f339f0f9079b3f617f965f26dd69e7fe97eb2923f6361bb14458d0502500a36ad8df36b023f61a18016d6f4c8
-
SSDEEP
1536:8X9reA0p8sI2eP3n2cmI4ku8R0a66LamGAs9LysRSdX4SLL4/nYAYR:8XZ/0G4cm0haa63AspXMX4SLL4/v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f99463f5c88160ade3e9f8be6f7f742f_JaffaCakes118
Files
-
f99463f5c88160ade3e9f8be6f7f742f_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
PEpsi Size: 52KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEpsi Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEpsi Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEpsi Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE