Static task
static1
Behavioral task
behavioral1
Sample
4b99c2af73b07b3e02dc26f3ce443a99_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b99c2af73b07b3e02dc26f3ce443a99_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b99c2af73b07b3e02dc26f3ce443a99_JaffaCakes118
-
Size
45KB
-
MD5
4b99c2af73b07b3e02dc26f3ce443a99
-
SHA1
7fa13b5b53fd46b58d1f2e65d356082789bc6909
-
SHA256
59641eda7b725c5cb8b2af13deef3669e3a9891c2e56f0463b20a89bddb007e8
-
SHA512
71fd627d901c7c66ba832f75666f08b4e98eaa778586c02b06135ba9dea9968e61ca419f4cab10f9f860e291d176a10adb848d5200fb9c103e808f938c50f83d
-
SSDEEP
768:s96/FQ1mk+zqvqDQ1xhqNM99m/tytdkajeKIKbM2qIITmYsv1L3oQvS/y:e6aMkb6uYtytkKI12qAvJ5ay
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b99c2af73b07b3e02dc26f3ce443a99_JaffaCakes118
Files
-
4b99c2af73b07b3e02dc26f3ce443a99_JaffaCakes118.exe windows:4 windows x86 arch:x86
c44f817d66ac95ac9717a218c816b93e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
SendMessageCallbackA
CreateWindowExA
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fnofnqq Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE