Static task
static1
Behavioral task
behavioral1
Sample
305373a56fe02dc6f761845bbeb10789_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
305373a56fe02dc6f761845bbeb10789_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
305373a56fe02dc6f761845bbeb10789_JaffaCakes118
-
Size
28KB
-
MD5
305373a56fe02dc6f761845bbeb10789
-
SHA1
2a36cde43098f496505ba1a46ef8798eb3091d49
-
SHA256
dad0054bb299e500319984dc319b64f8677e14b9591e792b606b316789535c35
-
SHA512
87f2e9af95202e060420090a524f117cf471556ce52bb349441ea8f40c5d9892d1445ff12f758ac27cdcf2a9845ee404fcd5bc6c4200595ef7555d476d70afc7
-
SSDEEP
48:QbQsBGgQCrzOtF0mXLkt48HEIRw39WR2WrGQHm:3syGCLkpvitG2WCQHm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 305373a56fe02dc6f761845bbeb10789_JaffaCakes118
Files
-
305373a56fe02dc6f761845bbeb10789_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE