Static task
static1
Behavioral task
behavioral1
Sample
657d9039c506faa0fb76d9000c17e1f2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
657d9039c506faa0fb76d9000c17e1f2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
657d9039c506faa0fb76d9000c17e1f2_JaffaCakes118
-
Size
24KB
-
MD5
657d9039c506faa0fb76d9000c17e1f2
-
SHA1
5a832479fd2355e7ffa1075f6082e90de5ea1cbe
-
SHA256
2711576144d96bc4de7df6185fd7a704455f8d749daa4a53dcf2494d1025138e
-
SHA512
d91e3b7efeae29b205daffaa54bf3df7407563b8915857df65a6e23a26c47edf3d59ba9504f97519979ccbb531688597957444dbc9719a738e542418066eaf55
-
SSDEEP
384:t85uPLAGDJSf8pZyYbMwQutB4SCm8TbqgoS/:/3DwoyEM1MXCdbZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 657d9039c506faa0fb76d9000c17e1f2_JaffaCakes118
Files
-
657d9039c506faa0fb76d9000c17e1f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE