Static task
static1
Behavioral task
behavioral1
Sample
089ffafa7c86c4c034c1f8249d7e0694_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
089ffafa7c86c4c034c1f8249d7e0694_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
089ffafa7c86c4c034c1f8249d7e0694_JaffaCakes118
-
Size
1.6MB
-
MD5
089ffafa7c86c4c034c1f8249d7e0694
-
SHA1
00eb4f5688061c22a7900e5be136a13797671b78
-
SHA256
83bb20bbed7dab65f0a6049989c03d5f257c6e463bb953fbe770f54ae4b80382
-
SHA512
21e71eea5ed93cefa620f3ea98eda52170987fc31247ea81d15312e0ab2173f3d955d974c5dd0b91ce18100138a731d90bdc04672d9665e72d672b53e3b72d73
-
SSDEEP
24576:xRTPM8zVkUetVI5ut/VkP+x6IS0Cv1py+YjbOY:fPMyZuvS0CNc+eKY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 089ffafa7c86c4c034c1f8249d7e0694_JaffaCakes118
Files
-
089ffafa7c86c4c034c1f8249d7e0694_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
.petite Size: 44KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE