Static task
static1
Behavioral task
behavioral1
Sample
8f332a93cbb05645ba2be602edb58f1a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8f332a93cbb05645ba2be602edb58f1a_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
8f332a93cbb05645ba2be602edb58f1a_JaffaCakes118
-
Size
24KB
-
MD5
8f332a93cbb05645ba2be602edb58f1a
-
SHA1
8d897b8a8e3a09daef423368ac75f7629e5d5b31
-
SHA256
fa261e0755aa70126781b9bae537a2c116df75dc674e2c7540de51b1c3a4bd51
-
SHA512
4e00d642ac58c87da55b4a6dd139663ddd9ca4c8129f6855abd4f2a8304991ea735a3fe7b80db3cf6f49dc2e9b3c870edbb5ba7980c973fa9b1e7fc68e40d791
-
SSDEEP
384:ku3ILV+M4Kccv1ZGwrlUoukDikvp45msTyp8DuwP+Uiw7vvxlL9+OX:ku3e4ZcblnukzvpqTyt/UN7DTX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f332a93cbb05645ba2be602edb58f1a_JaffaCakes118
Files
-
8f332a93cbb05645ba2be602edb58f1a_JaffaCakes118.exe windows:4 windows x86 arch:x86
edde0414dac6027c066f48d36f7f81dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
MessageBoxA
Sections
.MPRESS1 Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE