Static task
static1
Behavioral task
behavioral1
Sample
4a6e16c964c75d81e0ed6102c96df00c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a6e16c964c75d81e0ed6102c96df00c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a6e16c964c75d81e0ed6102c96df00c_JaffaCakes118
-
Size
12KB
-
MD5
4a6e16c964c75d81e0ed6102c96df00c
-
SHA1
c5e939bf43735d0c56f4accd98e7727d4e774609
-
SHA256
c7e2d33476e3f60331cafa747fef5d2c9101ddeb4fe6cf36393c0598ac3a3f4d
-
SHA512
731881922d446980daa2863a98c715f90e6d0541113ccfb8ee24e30720e166694662f32fcbb642961e000bb5756cad65a5a9549fd77486f22d4393a150aa0b98
-
SSDEEP
96:RIaSqyP53KLItf6DpFjYADjA1s25MuEK6tEzrVWWta4KRQhjazyBx1fGbMGug/Z:RAnAEx634sMKK6tyVhbGzyBx1mnZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a6e16c964c75d81e0ed6102c96df00c_JaffaCakes118
Files
-
4a6e16c964c75d81e0ed6102c96df00c_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
.text Size: 512B - Virtual size: 38B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 55B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ