Static task
static1
Behavioral task
behavioral1
Sample
0e60435c6fa5618edb885afb3c58c357_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0e60435c6fa5618edb885afb3c58c357_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0e60435c6fa5618edb885afb3c58c357_JaffaCakes118
-
Size
378KB
-
MD5
0e60435c6fa5618edb885afb3c58c357
-
SHA1
70dc0cf41aabe132bec17e6ead5e3d9e9ced8e36
-
SHA256
87951527a63fac966f324671d105d17fd2fcc9677d985257ee57528301c451a5
-
SHA512
aea454a4270ce6cba6d65902b8aef41bd6c622b8a35e24e3124c869c7bea03526483881a0b75efad15f65a0c5c9389adf15c8bca7766867b661d3ae967599b1b
-
SSDEEP
6144:LgtM9UUj4PHjMb16E3oGMRk/dRzEdoAxdoovaRMO2IpqH9mm2AH8n5LLyMU7w9aX:M2OMb16E3om/HEdoATraRDpqHiAH8n5s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e60435c6fa5618edb885afb3c58c357_JaffaCakes118
Files
-
0e60435c6fa5618edb885afb3c58c357_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 223KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE