Static task
static1
Behavioral task
behavioral1
Sample
0e2f571cf26e8688391e76ea2484ee46_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0e2f571cf26e8688391e76ea2484ee46_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0e2f571cf26e8688391e76ea2484ee46_JaffaCakes118
-
Size
232KB
-
MD5
0e2f571cf26e8688391e76ea2484ee46
-
SHA1
3762e316b9a7bc9a3e25432605e0d70c7726f7d4
-
SHA256
82667e9c33d90baa1022338719ea16d054480affb524927580e0ca7aba4b5ed4
-
SHA512
c548c17258c75231e692b9e87571868ce227dd702d2f51a9d8561c2252d9c2712bf25fc977d5ff815fccf978fc79c73a126fba19c33812b280371db1f2ac8ffb
-
SSDEEP
3072:+ifrZhOfYqJeg5fhtQC956SEEyTXl3dAhSv36a+wz3:+QrnOfXJeQ5t9MSbyDbAUyA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e2f571cf26e8688391e76ea2484ee46_JaffaCakes118
Files
-
0e2f571cf26e8688391e76ea2484ee46_JaffaCakes118.exe windows:4 windows x86 arch:x86
83343292a2b868352964155c145bac9a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
user32
MessageBoxA
wsprintfA
Sections
.data Size: 228KB - Virtual size: 228KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE