Static task
static1
Behavioral task
behavioral1
Sample
2198bdfde9331885d647b26e812bdb7c_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2198bdfde9331885d647b26e812bdb7c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2198bdfde9331885d647b26e812bdb7c_JaffaCakes118
-
Size
80KB
-
MD5
2198bdfde9331885d647b26e812bdb7c
-
SHA1
730900b63fd652e13bc9510738211291212163f6
-
SHA256
0f5a39362724bb7c8c6ea22e93ab1c91e017f807b57efe293365cbdd55824227
-
SHA512
02d33d108634cc8cb8abcb79e12ad441e6d1cf15f0b8e609879eab2aa1586b0a581618f8024da3a7f067209f250c467d282fd46853fa736c088a188a7046c72a
-
SSDEEP
1536:+3aXspBA5k3e6zJee7psalivGeyiwGQ4gmQ9a6yKMukv:+3m5kbzXli4iwGQDmQQpKMukv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2198bdfde9331885d647b26e812bdb7c_JaffaCakes118
Files
-
2198bdfde9331885d647b26e812bdb7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
.neolite Size: 47KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.neolite Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.neolite Size: 7KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.neolite Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE