Static task
static1
Behavioral task
behavioral1
Sample
491284d7c153c90e6637a3e815954977_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
491284d7c153c90e6637a3e815954977_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
491284d7c153c90e6637a3e815954977_JaffaCakes118
-
Size
59KB
-
MD5
491284d7c153c90e6637a3e815954977
-
SHA1
96456e2696f8ff9ec80dc52c29be1045c070ab93
-
SHA256
2e09b6f5da061034e319e3c96d82608c59720efcce9b37054ce15ac9992b62c0
-
SHA512
608760a4e58796bba5c476b39daf861ffc8f4d887116bb930a71b8e2db1457e61bf768869dd2ecdc6c435ed1c71c2cce81e3985a60b7626c65d8cbbddff5e56f
-
SSDEEP
1536:NiRFtht0ludc0WItmagBXuBu+Rxwdv7iovww:mFDtHnWCmagB6u+n2v7Bv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 491284d7c153c90e6637a3e815954977_JaffaCakes118
Files
-
491284d7c153c90e6637a3e815954977_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 59KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE