Static task
static1
Behavioral task
behavioral1
Sample
428656ed41d2c42c450be20675816391_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
428656ed41d2c42c450be20675816391_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
428656ed41d2c42c450be20675816391_JaffaCakes118
-
Size
32KB
-
MD5
428656ed41d2c42c450be20675816391
-
SHA1
13bc9e0ceca8ccbb93e3babc6a89e90c0fca9e5a
-
SHA256
347b66042c8faaf0d8f4a753d76da3f1aa321d62dd034e668f28c18bd1e35179
-
SHA512
9b915db6d9603b37cc56be58462f99ffc24a3985a11678691521fb56aba99213355b2944489f7e865354908b136334f0f721e4183e55bfa07f71799ac25d1793
-
SSDEEP
768:NDRVfQMpYobMYdqq4u5GuuQZfVh9HmzzbPm3:NDRZiobMYd4usm/HMfG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 428656ed41d2c42c450be20675816391_JaffaCakes118
Files
-
428656ed41d2c42c450be20675816391_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE