Static task
static1
Behavioral task
behavioral1
Sample
470b3fa3244645c5bed61cfae2d91bc5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
470b3fa3244645c5bed61cfae2d91bc5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
470b3fa3244645c5bed61cfae2d91bc5_JaffaCakes118
-
Size
24KB
-
MD5
470b3fa3244645c5bed61cfae2d91bc5
-
SHA1
fc0b7e2415f712d72aa0f4d700e3be3a465d70af
-
SHA256
9e05e47e8df5c6ea0f8e7d92a30aa09f150ba40dfe3e34b6d258be407a23a561
-
SHA512
3497156189be1d697a9099b038e6d37e9aa2044246186c4e7a206ab0b5666dd9b8d31df4435fe0b67ce6a515479f5df4086c5cce2b233c5bd602d9c74044a636
-
SSDEEP
192:USaiCrgsEfb5/JjcxmFk6OMDB595v6F3FRoODAHybCwj/lxyJia:US9C89NNcoy6Ogr5vG4HEC6i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 470b3fa3244645c5bed61cfae2d91bc5_JaffaCakes118
Files
-
470b3fa3244645c5bed61cfae2d91bc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE