Static task
static1
Behavioral task
behavioral1
Sample
3f6a185b1cb279ebc655ac2c96b7772d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f6a185b1cb279ebc655ac2c96b7772d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f6a185b1cb279ebc655ac2c96b7772d_JaffaCakes118
-
Size
103KB
-
MD5
3f6a185b1cb279ebc655ac2c96b7772d
-
SHA1
212b3db064f90fecef8a50792654d53308918587
-
SHA256
b5d86e0781d63c9ecee02ef22eae915cb86c8e555c1cb07fcdfb78130796cbeb
-
SHA512
f94358c987aecfc6a3fe1fb28813c0933c5ca0b710904b872d3c56f9129fb7b61db8f7464e1063dd3da76d7dd9c77807669654ab11f23f3967a73b1e31e8afef
-
SSDEEP
768:iakLN9L/MxPloy+hXyiA2IRyblMrAf2QdL0Ws73K12HUMfv5N5aVM9GbjFU3/Hme:0NKxtCX424eluABSDK1OvXL90FGwVGh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f6a185b1cb279ebc655ac2c96b7772d_JaffaCakes118
Files
-
3f6a185b1cb279ebc655ac2c96b7772d_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE