Static task
static1
Behavioral task
behavioral1
Sample
06dbb4e333e29ad4b88b2fddf47c2123_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
06dbb4e333e29ad4b88b2fddf47c2123_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
06dbb4e333e29ad4b88b2fddf47c2123_JaffaCakes118
-
Size
41KB
-
MD5
06dbb4e333e29ad4b88b2fddf47c2123
-
SHA1
b7d6dbc5219eb68e61ed0a5e08317535ea8b4004
-
SHA256
98cf448f5e720c3ccc88ca0ba44124bd8f5ab7857c2e4b49afc6a171a2043cc0
-
SHA512
1d0b083614dd148acbc5d576f5f036b007b39b91ffc06831d2f2653e9783115a06c115110e96336e8870802573f9d5a1e2ec1781a0aa5dabfe970b196e6494e8
-
SSDEEP
768:pZRQCp6sDh+ZL8voAIxUGF7b/VMRwlto1sK8tXiN3rn5SSUENHI:zRQ/C+ZL9AKgww1sK8tXi4SUaHI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06dbb4e333e29ad4b88b2fddf47c2123_JaffaCakes118
Files
-
06dbb4e333e29ad4b88b2fddf47c2123_JaffaCakes118.exe windows:4 windows x86 arch:x86
82fb704212017bcfbf7b501eda5c6100
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
ExitProcess
VirtualProtect
user32
MessageBoxA
wsprintfA
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE