Static task
static1
Behavioral task
behavioral1
Sample
298bbdaa3076c43d0cb2cc94a3f06411_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
298bbdaa3076c43d0cb2cc94a3f06411_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
298bbdaa3076c43d0cb2cc94a3f06411_JaffaCakes118
-
Size
5KB
-
MD5
298bbdaa3076c43d0cb2cc94a3f06411
-
SHA1
49703266d9b88351f1896ddbfe19b3d464dc8604
-
SHA256
c1b20b43bdfe9c384faa927a71da62fa9325c48c7e849a914c154ceae228377f
-
SHA512
c9df9ee88629e7d3e7a4cf304e72c471e574567f66c82cc9c7bcafe1b4bd1737948192710cd4b7feeb9eac3b4230abcaffb485cc75fc2551fc7b1ef3817c0fb2
-
SSDEEP
96:AWrwoiSC3DiDb3LsoA8fp+NHPrA2DZV/SR97jYkui5qX+jKMb:AWrwdfeDzLu8fp+NHz1DGRF9ui8M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 298bbdaa3076c43d0cb2cc94a3f06411_JaffaCakes118
Files
-
298bbdaa3076c43d0cb2cc94a3f06411_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 4KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE