Static task
static1
Behavioral task
behavioral1
Sample
248ab64541a42941762c93f8eeb86c41_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
248ab64541a42941762c93f8eeb86c41_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
248ab64541a42941762c93f8eeb86c41_JaffaCakes118
-
Size
44KB
-
MD5
248ab64541a42941762c93f8eeb86c41
-
SHA1
bb664f15a45bc05f86c8a824428ffeeb665ef555
-
SHA256
6cf658d39300a3765a2b24b2002f631797af778c223f733ea38d248eb9669f49
-
SHA512
2fc349d2b16836ec65775bf53f39ceb20f5b453ee0dbed2ac81c1a885c08b13f221117d3ea7b58f485ccb654c9e3295743a13743b7a72cc3df8e0c318a53b815
-
SSDEEP
768:2ukQp2zXE7kbNZ1OP3gWN54Y1gLJPJ+obk6vf7wHB51mYEGnXITgrBqlLX:5jF7kb/YPXNl1kZJ+obJvzwh7mYEGnaB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 248ab64541a42941762c93f8eeb86c41_JaffaCakes118
Files
-
248ab64541a42941762c93f8eeb86c41_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE