Static task
static1
Behavioral task
behavioral1
Sample
18c3ba49c322aa3c04c843e8811c96e5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
18c3ba49c322aa3c04c843e8811c96e5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
18c3ba49c322aa3c04c843e8811c96e5_JaffaCakes118
-
Size
10KB
-
MD5
18c3ba49c322aa3c04c843e8811c96e5
-
SHA1
0159090e248b11cf94c3c283ca88f146e2d3ee40
-
SHA256
c60680e3d2bb1ddea0a2b770ad9f5b83439c030ababeaf401eaa720bd04285a3
-
SHA512
ca8b22ddb3addc3ad1dad1f874b27b932653c4c841ca579cdbff876179172fc81fc1045d06bea9de01ca1c121ea1c793766e0613715a3062f5117b64f5044800
-
SSDEEP
48:6aY8nd8g+pYG3OBwYqqL3vcKRaopr0k0ryJAFcRZyCDsS6QcnBq:ZtnGNYZjq6fTv50R4AFcPsS6xQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18c3ba49c322aa3c04c843e8811c96e5_JaffaCakes118
Files
-
18c3ba49c322aa3c04c843e8811c96e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
1ff43bed8b77c3917644be2856b7af3b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindowAsync
ShowOwnedPopups
MessageBoxA
kernel32
ExitProcess
SleepEx
Sleep
QueueUserAPC
CreateThread
GetLastError
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ