Static task
static1
Behavioral task
behavioral1
Sample
4a9a125b1421a3b2cef7761ea3a9e79d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a9a125b1421a3b2cef7761ea3a9e79d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a9a125b1421a3b2cef7761ea3a9e79d_JaffaCakes118
-
Size
28KB
-
MD5
4a9a125b1421a3b2cef7761ea3a9e79d
-
SHA1
e0f389a223f17db706e4c0817b65562791d31b5b
-
SHA256
78be45aa1ad8c538ab7d98aaa7a092a48c74d89efdeb55e132036a57be4b9054
-
SHA512
297ed81e1bb60f15f28c8ac35039745de6a41bc64222c69241df5fadbbd879d284982ad784e8fa4e6ca46e785fa4b34cca09d806f813de6354488d2ed5e8d800
-
SSDEEP
768:qcC49i7mdRF4pAIlJc8oNXUoXUS8Lqvxnlpzd:qcCuRCptluUzSM+td
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a9a125b1421a3b2cef7761ea3a9e79d_JaffaCakes118
Files
-
4a9a125b1421a3b2cef7761ea3a9e79d_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE