Static task
static1
Behavioral task
behavioral1
Sample
17a4a4d6c23f7020ed0f20edb1157631_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17a4a4d6c23f7020ed0f20edb1157631_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
17a4a4d6c23f7020ed0f20edb1157631_JaffaCakes118
-
Size
24KB
-
MD5
17a4a4d6c23f7020ed0f20edb1157631
-
SHA1
5272e078a5d0bc2be599ada1180e72ecc8eef1c3
-
SHA256
6891271172a103023d8482da7ea5098f155d1fad17797b1da60c01fcc8fab86d
-
SHA512
db6fae377b3ae51ae5566900c5c47dbfb28ed04ca40d8ab0f7e0e56bc15ec6d13f8fea4460554a7217eac2f6bc61c6d38010cdfecd5f31387486173793f05dd2
-
SSDEEP
384:A2oiOMV/bRVrxKR8WwKZXGZNCgTZe3DzbXurcTiz7rUQw9IeuthBlesNoMU:uNMRbjvWw42ZNCCZe3vbXuwHQwvutXx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17a4a4d6c23f7020ed0f20edb1157631_JaffaCakes118
Files
-
17a4a4d6c23f7020ed0f20edb1157631_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE