Static task
static1
Behavioral task
behavioral1
Sample
5df58d526ab5416420a1c46e89ae14b6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5df58d526ab5416420a1c46e89ae14b6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5df58d526ab5416420a1c46e89ae14b6_JaffaCakes118
-
Size
14KB
-
MD5
5df58d526ab5416420a1c46e89ae14b6
-
SHA1
a09d7d61d8bd6ec46099076d8c0992409942b32e
-
SHA256
c9b22961b032535426f4aec47e3b41eb274018993f355077b7e763dc4a5884ff
-
SHA512
11c34c3a2a8cdb8d00b53013cf0374bdd98613efd7e056c19a73e913052ecc231e5fe3f6fe9ab11740a0e4630eb0d5e0504bf4fe8422c6392c4fb9d5d519058e
-
SSDEEP
192:w55GWiy/yt0H6ufCL2+2vhcKBfVU71Qai5/BJuf06rPIyWglMo9IhK/Hsb98iP:M5My/y+1qKrv+62qa/rsOMo9IhKk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5df58d526ab5416420a1c46e89ae14b6_JaffaCakes118
Files
-
5df58d526ab5416420a1c46e89ae14b6_JaffaCakes118.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code1 Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE