Static task
static1
Behavioral task
behavioral1
Sample
5a756de45546cf9d46352cbc8c805cae_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5a756de45546cf9d46352cbc8c805cae_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
5a756de45546cf9d46352cbc8c805cae_JaffaCakes118
-
Size
50KB
-
MD5
5a756de45546cf9d46352cbc8c805cae
-
SHA1
7b36a425c0297aceb394a0683e4de521f0898c3a
-
SHA256
825f51fb000d82f79e733aa8a7cfcdf2cfc3ed05d3a7958f5f280368465eb630
-
SHA512
daf6ce86611272a019bbc5194e4f17289e0953d897993c2160f1d1f0f36e122babc430b784f8a50ae779c41191a882e4b40aa423be78eeea98cf47822f40c918
-
SSDEEP
768:/1KDy0Yl4jDZFSsP6acaQm73Scv0AQZBZpGtylGM5yU3fEeLggw:9KDu4HZ0sCmYAQZAt7M5yrgw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a756de45546cf9d46352cbc8c805cae_JaffaCakes118
Files
-
5a756de45546cf9d46352cbc8c805cae_JaffaCakes118.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE