Static task
static1
Behavioral task
behavioral1
Sample
416e8d77fbed67b9dd207f257fbcdea2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
416e8d77fbed67b9dd207f257fbcdea2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
416e8d77fbed67b9dd207f257fbcdea2_JaffaCakes118
-
Size
24KB
-
MD5
416e8d77fbed67b9dd207f257fbcdea2
-
SHA1
3f032e5469dafecf137271e2e5c9cce6b757f417
-
SHA256
0139e81670ce82d7b46986bf3e59346fff5ab4f3415d4d57815298748912f587
-
SHA512
a012118beb5ca8b02f72d047947a9769272d59b06c9b9be9b458830508e6a21c427646180f7e6a79df266ad6176c0fd8858a2f2fda3a8798d3d42a77858dc9ab
-
SSDEEP
768:VFg3O0uVJO2S7SRRLA2o1wO7Hs+FI8PyK:8e0uVJAc62owO7M+FvyK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 416e8d77fbed67b9dd207f257fbcdea2_JaffaCakes118
Files
-
416e8d77fbed67b9dd207f257fbcdea2_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE