Static task
static1
Behavioral task
behavioral1
Sample
1be1fc97f7abd4dc86f68f195f7f0482_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1be1fc97f7abd4dc86f68f195f7f0482_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1be1fc97f7abd4dc86f68f195f7f0482_JaffaCakes118
-
Size
47KB
-
MD5
1be1fc97f7abd4dc86f68f195f7f0482
-
SHA1
e96c94344e93f2785f8e9937c6bde396114a4243
-
SHA256
a1a00659266770f73c04bb6c2d1f8d029f5373c2e76cc85f426fb3b3c260c690
-
SHA512
72438dbbd4d683b62cdc782478a39b93f46f014fcb877dba7b42cf8677bfe356e7f77cf288f4595f42979647494999c3718a224f42ae7c390c9b96cc247bdf61
-
SSDEEP
768:teJwtg3cAcyQTrXK8w+CcSOEiI9J7KRIFEqOsJLnEd0JetN5pswoB0+Uv/1vcTd:kwznrXKb3cSOPIX5FLOsJYiJeb5r+0/K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1be1fc97f7abd4dc86f68f195f7f0482_JaffaCakes118
Files
-
1be1fc97f7abd4dc86f68f195f7f0482_JaffaCakes118.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code1 Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE