Static task
static1
Behavioral task
behavioral1
Sample
4c7552391c66e23be07fc8a580cc41fa_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c7552391c66e23be07fc8a580cc41fa_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c7552391c66e23be07fc8a580cc41fa_JaffaCakes118
-
Size
23KB
-
MD5
4c7552391c66e23be07fc8a580cc41fa
-
SHA1
9cac840c1e7d65cb147460e201323c663f76985a
-
SHA256
69e57d28e4eda938ad9dc73997a7556e5d721b0f64f706d4c7f44d44e008b71e
-
SHA512
41e80f66e2d9c3647df9e5d21f21e27b9c3c7c6bfda82a8f2e21c2b143ef68949289e9ce5613307030a757b3b65ab06808b442e12eac95e91fd4bc8bfcc0c2c5
-
SSDEEP
384:WSlgQcaIoqpDgg7SUse81A6PyU6eDbkUHdqzp132xINcCefUIcPKi:qtg7Ua1A66ADbt9032xy4UIcH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c7552391c66e23be07fc8a580cc41fa_JaffaCakes118
Files
-
4c7552391c66e23be07fc8a580cc41fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE