Static task
static1
Behavioral task
behavioral1
Sample
4b55e8dc211849b0e9d4330c5ae3b191_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4b55e8dc211849b0e9d4330c5ae3b191_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b55e8dc211849b0e9d4330c5ae3b191_JaffaCakes118
-
Size
168KB
-
MD5
4b55e8dc211849b0e9d4330c5ae3b191
-
SHA1
73e5cb231046caf00182fdfd4c4aaa6146f8d928
-
SHA256
1e856634f70889b7bced2952a5252cc4a8f0ccccad55cfb9c3e6a6d367abfa99
-
SHA512
a577f29953beea07650dd626d7a794086acfe124db43a863b85fd9dd1f91a14eb7c340c13bf5b756cf369b6f891227e6d3d1bafbfbbc1f91c1fa7e2174800739
-
SSDEEP
3072:ww4JqKlzNAk9JuB/RVgU974KlGro2UWQRtgxC6c3ovNRdNUirqSmF7Nv5L:ww2qKZNAYmVJ974KlGM/g46cYVWimF7T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b55e8dc211849b0e9d4330c5ae3b191_JaffaCakes118
Files
-
4b55e8dc211849b0e9d4330c5ae3b191_JaffaCakes118.exe windows:4 windows x86 arch:x86
c22d1f698ed886e6f29d6405a3cd6a04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
LoadLibraryA
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE