Static task
static1
Behavioral task
behavioral1
Sample
18deecc52f7a910322e34030da73ed1d_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
18deecc52f7a910322e34030da73ed1d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
18deecc52f7a910322e34030da73ed1d_JaffaCakes118
-
Size
131KB
-
MD5
18deecc52f7a910322e34030da73ed1d
-
SHA1
e00e98b4837e1156ff1a590b1a74c8268847814f
-
SHA256
3b92c28037adbf62000583ccaca0fb489cea394f0dd1bfe34ca98a26c6941eb1
-
SHA512
dac255865553f17608cdd3dfb2e2751ad896fab3fab9fe65b9a0071d254b63ea7491fc87de3916118c1f3ddb21b1cda1dc1e5951fd11b9a4c754187da343d7ef
-
SSDEEP
3072:XZBsDz74gg1qtpYmufU2/Yki/l42mpwXf4/qUeDMJ4TEmQt10ePRBDc1l:JCrXl/l4Ppo4yUem4A71tBDSl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18deecc52f7a910322e34030da73ed1d_JaffaCakes118
Files
-
18deecc52f7a910322e34030da73ed1d_JaffaCakes118.exe windows:1 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE