Static task
static1
Behavioral task
behavioral1
Sample
07aa136f6929b27e4aea7df1757a0f74_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
07aa136f6929b27e4aea7df1757a0f74_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
07aa136f6929b27e4aea7df1757a0f74_JaffaCakes118
-
Size
43KB
-
MD5
07aa136f6929b27e4aea7df1757a0f74
-
SHA1
e6ad4649b2580d259c671af5e8ada78971bc5e51
-
SHA256
42e9fc2b8b9ed711ce7b1227013a4537541b124ba5a9043e373bd398482928ee
-
SHA512
2b3bfef753d6655c57154f35b19993a153ce58550584e490d15d3de12ca83d00ddf86967cde679e9cd045b3706f8f5fdf430121a8ccec08d855a46dd9b5bfacc
-
SSDEEP
768:zLjJoHI8FsVfixHkDk1fhnhkGw0lsof/Um3rqY8vXUl7FxL9MZa0m7m:z5+tsZixHpfhhkL0lsUyYwg7F03
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07aa136f6929b27e4aea7df1757a0f74_JaffaCakes118
Files
-
07aa136f6929b27e4aea7df1757a0f74_JaffaCakes118.exe windows:4 windows x86 arch:x86
b8dd9610f7f3c4e817e66f3501bf26f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
�� Size: - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE