Static task
static1
Behavioral task
behavioral1
Sample
64e3cbfa9a30fc07cf9c0ee3671057ca_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64e3cbfa9a30fc07cf9c0ee3671057ca_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64e3cbfa9a30fc07cf9c0ee3671057ca_JaffaCakes118
-
Size
465KB
-
MD5
64e3cbfa9a30fc07cf9c0ee3671057ca
-
SHA1
aa90f378afc4e37c06bc09f3113399351e7b3d55
-
SHA256
dfb5df09d484e6d9376379057b484383ccc153de0243cf80b048b0d1efb37482
-
SHA512
ab87a00b56bbd5387d5346271c51ae68f165cbf2929a24cea431e786ea7c4cf8343a947a35db03026bdb342a7e558e3a6fd816876b247648f8f418949b566443
-
SSDEEP
12288:vVczmKHa+dZoGAWRB/rCvt9xUsk8s/EY70zt+z4rmUEGvM:NcFa+ToYTCvt9WnOFmm0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64e3cbfa9a30fc07cf9c0ee3671057ca_JaffaCakes118
Files
-
64e3cbfa9a30fc07cf9c0ee3671057ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 168KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 132KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE