Static task
static1
Behavioral task
behavioral1
Sample
35496f48bab644492d75cf7d69abc159_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35496f48bab644492d75cf7d69abc159_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35496f48bab644492d75cf7d69abc159_JaffaCakes118
-
Size
32KB
-
MD5
35496f48bab644492d75cf7d69abc159
-
SHA1
5ea0d10907f4be07ad32dfbc2a8a9a3fea5a95fa
-
SHA256
77bfb979a3694b322af3aa868564070f88ea82d1868f6a12a53f49837074b151
-
SHA512
d31f3056fbc73ec1e697bdc99ce211603e8169bfdb36248e9ff427eae29c953876e9e35c22c711b1886dff205b8b86d06340fa39098939bac82bc1814b83504a
-
SSDEEP
192:6drmpCjMVL3Z3ppvmhngHnCKj4RS57/R2:6drmPppyeCH4M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35496f48bab644492d75cf7d69abc159_JaffaCakes118
Files
-
35496f48bab644492d75cf7d69abc159_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE