Static task
static1
Behavioral task
behavioral1
Sample
4bfc7e19cb1a5c8b67dd82cf08d2f403_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4bfc7e19cb1a5c8b67dd82cf08d2f403_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4bfc7e19cb1a5c8b67dd82cf08d2f403_JaffaCakes118
-
Size
59KB
-
MD5
4bfc7e19cb1a5c8b67dd82cf08d2f403
-
SHA1
692403e4ed6ec0861a567e57ed9dad66748bf997
-
SHA256
acb233dc9ba10b1a3226ef3b2dc27e96cc524f30dfbfdfba8dcc1b2c2d718b77
-
SHA512
5030752ee84fba2eed0175b00266886cf440b920d1de2166cd7d2b721f500471d23eb007b684fdc5947597f38895822ef3d8f778dda0e9c9710d668e0752fa96
-
SSDEEP
1536:QChLBZ2Zsy2kF1ge8nYrmsZsqoJmCguvL7S:QcjUsL4IjwoJmCguv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bfc7e19cb1a5c8b67dd82cf08d2f403_JaffaCakes118
Files
-
4bfc7e19cb1a5c8b67dd82cf08d2f403_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 59KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE