Static task
static1
Behavioral task
behavioral1
Sample
0e60886463645c9ffffb0f4c8b4051ce_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0e60886463645c9ffffb0f4c8b4051ce_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0e60886463645c9ffffb0f4c8b4051ce_JaffaCakes118
-
Size
24KB
-
MD5
0e60886463645c9ffffb0f4c8b4051ce
-
SHA1
631f14622b1625bc06c473eae19f2e346bcc7853
-
SHA256
a1038024fa6cd112563622c37560957ef3ff49a8ef29f393a60ae84b5148d940
-
SHA512
611665ca31c0770309117c24a59dd596ae40d0d36a4d1ba25a1484785b193bac594a4e6baafc4a6d031aeb235ba4865defe7735207703b7b51aebf1bf887e792
-
SSDEEP
48:4YE6BGQA/T3AamN0cW9uNiv67UoqVq1upQlZaMhpLNZExiefWTmwPInbCSiYyFX9:Xc30w9Yl5kQlZjlZE5fYPInbCqcEM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e60886463645c9ffffb0f4c8b4051ce_JaffaCakes118
Files
-
0e60886463645c9ffffb0f4c8b4051ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE