Static task
static1
Behavioral task
behavioral1
Sample
04fa32f7b5ec6055bc0091c435ed8a93_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
04fa32f7b5ec6055bc0091c435ed8a93_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
04fa32f7b5ec6055bc0091c435ed8a93_JaffaCakes118
-
Size
52KB
-
MD5
04fa32f7b5ec6055bc0091c435ed8a93
-
SHA1
f08271fa84be7ccd875ab7e7bc490e84a668d1c1
-
SHA256
27d74d93a908fd7d95f556f23734b0d4280e0277812253164ee809045a174c01
-
SHA512
85b02bc900fb2f447f1b56f57c50d4c8187286d6be08d9d18b4a512fbdfaae36c81db77c4e247b1c57a8b41875f4c5674b1d4183d84fa3cf026b6ad147ed30a9
-
SSDEEP
768:6MgpdYryZ1e4xszhnQVH9On+B2zkLWQ3GOzN9kE9mMtbHVVgmzQnlnvr5B:6Mgp62Z1szCR8OBWOzNaEZzDgmsnB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04fa32f7b5ec6055bc0091c435ed8a93_JaffaCakes118
Files
-
04fa32f7b5ec6055bc0091c435ed8a93_JaffaCakes118.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code1 Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE