Static task
static1
Behavioral task
behavioral1
Sample
2aa0ca92f1be56ac0839a17bdf056194_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2aa0ca92f1be56ac0839a17bdf056194_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2aa0ca92f1be56ac0839a17bdf056194_JaffaCakes118
-
Size
20KB
-
MD5
2aa0ca92f1be56ac0839a17bdf056194
-
SHA1
cc0578e9017e6403a51178dc4db0bcd4698409cf
-
SHA256
984d7ddef1f9a38b8d85543be142b147643913e6f127791c2ecde648e1f01f17
-
SHA512
687c7098cce6e3043e4d8c95443feace99dd5f1afe77eb7c5f7a5f78d9159a2e68cadc02b8ec5690a0024a3056dd32b9a0112b8ee7dec97ce08af53a189e0fdf
-
SSDEEP
384:nx94neYaNwCJq0ohBvD8samfu+v9ofPBblg+tsDq7u8+x:xyne4+5WLTaOFctTu8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2aa0ca92f1be56ac0839a17bdf056194_JaffaCakes118
Files
-
2aa0ca92f1be56ac0839a17bdf056194_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
�rBot.ex Size: - Virtual size: 804KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE