Static task
static1
Behavioral task
behavioral1
Sample
0d8a341c0e8f0ee1a7b73a2b2c03cb14_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0d8a341c0e8f0ee1a7b73a2b2c03cb14_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d8a341c0e8f0ee1a7b73a2b2c03cb14_JaffaCakes118
-
Size
164KB
-
MD5
0d8a341c0e8f0ee1a7b73a2b2c03cb14
-
SHA1
6fbf5c74bb2d4031c969cb052fcf155b05f0eb0d
-
SHA256
291986fb743f78c400161122d35741e06d6df3a92f71b2685b8038ffff6b0326
-
SHA512
97690eeebccff78f9e0314d60e483fda74ef88533149896e7b01b72ef8691b9a6180cd4496c35949659ce2471206d2c85c70fb7138ca86a38d0d2d8dc529cde0
-
SSDEEP
3072:+Hp+i70Wqf9JuB/RVgU974KlGro2UWQRtgxC6c3ovNRdNUirqSmF7Nv5D:+Hp+nWemVJ974KlGM/g46cYVWimF7hV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d8a341c0e8f0ee1a7b73a2b2c03cb14_JaffaCakes118
Files
-
0d8a341c0e8f0ee1a7b73a2b2c03cb14_JaffaCakes118.exe windows:4 windows x86 arch:x86
c22d1f698ed886e6f29d6405a3cd6a04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
LoadLibraryA
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE