Static task
static1
Behavioral task
behavioral1
Sample
632f49df42e48d2f61569cee935db069_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
632f49df42e48d2f61569cee935db069_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
632f49df42e48d2f61569cee935db069_JaffaCakes118
-
Size
24KB
-
MD5
632f49df42e48d2f61569cee935db069
-
SHA1
b1aa287852293a4d32b00d030e0e7590d50aa54b
-
SHA256
d9624d5c7e75367a3e1cdf86fbf87e5b71137fec05223da6125c286cb1f1d8df
-
SHA512
0542e5550cd3c48dc78e911092fdfefb321e5b104b75cd956f377d95f25a567eaf8cca8b1806561cb2f107fc7fd6270493447e22230b1ba88329744fa9885e03
-
SSDEEP
384:K2bESMA+f8ogjcM95p9elwZvFx+bYIv7c+a:DESMtf8PcM9f9eOF4YIv7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 632f49df42e48d2f61569cee935db069_JaffaCakes118
Files
-
632f49df42e48d2f61569cee935db069_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE