Static task
static1
Behavioral task
behavioral1
Sample
481e00525683700a4eb29f2989b47194_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
481e00525683700a4eb29f2989b47194_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
481e00525683700a4eb29f2989b47194_JaffaCakes118
-
Size
18KB
-
MD5
481e00525683700a4eb29f2989b47194
-
SHA1
50bf9f652b88f14ed913424d089280f93bcfcbf3
-
SHA256
cefbf0190e5ba6fa42c96522125365fc07a292d68a36e571ffb8c0b93b8a971f
-
SHA512
36b6d005f79dd52180455fd42230494cde5aa170e4da9dc9fbea8859536e7a15774f49035683dddcdd5a5e138d094659b5977c1860ba43152e5465c12be2be10
-
SSDEEP
384:NSy4hZXKEEVRmV7g5L40N3NL62crlpeUovmo9ZjMKfI0qfcmP:X6pKEEEr43tB1UQz9ioHQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 481e00525683700a4eb29f2989b47194_JaffaCakes118
Files
-
481e00525683700a4eb29f2989b47194_JaffaCakes118.exe windows:4 windows x86 arch:x86
b0aab001d0c6a2f40b084854c41fe4bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamA
ntdll
ZwAllocateVirtualMemory
comctl32
InitCommonControls
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ