Static task
static1
Behavioral task
behavioral1
Sample
648c36f2ae104252c838ec97ca5ac2a3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
648c36f2ae104252c838ec97ca5ac2a3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
648c36f2ae104252c838ec97ca5ac2a3_JaffaCakes118
-
Size
24KB
-
MD5
648c36f2ae104252c838ec97ca5ac2a3
-
SHA1
b90ad39e1bad2b1f916b69c3ef0ec6e00aa13166
-
SHA256
10df836b7ecbb88e993f411f1c5f736795ccdb2317cb86e66323c4ac67d2e1ea
-
SHA512
7666798b517532c9d9394d41d5e857ebacf733ce5dd66905ea1e7bf5501acf9fd14305bdf7ac8a30bf252af38dc956fc683fbea50c89b44f11d1b6278c8d0fb8
-
SSDEEP
384:hAzkSXAL+9fO7sQbg649O10KPvtASKp6qf62iF2iRNxH+JmN+LljjWjjYWdaqqWF:hAzkfK9f2sQl4ozHtWp6khKOmsLeZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 648c36f2ae104252c838ec97ca5ac2a3_JaffaCakes118
Files
-
648c36f2ae104252c838ec97ca5ac2a3_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
.aspr Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspr Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE