Static task
static1
Behavioral task
behavioral1
Sample
6596f5437c968e99fa5fcf9cf5750102_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6596f5437c968e99fa5fcf9cf5750102_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6596f5437c968e99fa5fcf9cf5750102_JaffaCakes118
-
Size
32KB
-
MD5
6596f5437c968e99fa5fcf9cf5750102
-
SHA1
5a3fc750848262271deda2c14f638ff306ac1d52
-
SHA256
a779d6aefe0cc9c6627237ea90c64362826b1dbf1918ada82065346fd10609ab
-
SHA512
c02220a344d09b4a7ae4964bd2f1310afad50e7c0447932a3a9d49fddebb31bbfea6c6d032bda0eae789fc4f1dd0fa3c21f2fc4334b8555e35befe80ab4745f4
-
SSDEEP
192:lAhBAtBtD1C+8zEP/nUD3UwtK5014K0r1om38nsBiWxD26JN5GvbUE7RAv:lsBGr1CHzcv63hA0Wx1L3Yy25TUE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6596f5437c968e99fa5fcf9cf5750102_JaffaCakes118
Files
-
6596f5437c968e99fa5fcf9cf5750102_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE