Static task
static1
Behavioral task
behavioral1
Sample
68a4d128bf8655df1ea17c21ebe061b3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
68a4d128bf8655df1ea17c21ebe061b3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68a4d128bf8655df1ea17c21ebe061b3_JaffaCakes118
-
Size
124KB
-
MD5
68a4d128bf8655df1ea17c21ebe061b3
-
SHA1
62e65bb9ce28b8bf3ccfc8078dd8636d4eaca18f
-
SHA256
20ac36d927f5106010f069f2b787fddb3aca8e8a93a076c2cafd8ec046d16e61
-
SHA512
d52c4369942b0930e0dfe417ac66fb4227b1b1b7c3471b379d4a5f7d251cd587078b9decbadfe3aae9f49620c2659783ca6c3a76f47d735d9ffd3cf4e3e7e3c9
-
SSDEEP
3072:Om7Zbo9aJ8JrCdkLDTYoILzONBu0JBr2qnOovPel++wOx8:OmG82Jea/cTzOO0JvtOYw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68a4d128bf8655df1ea17c21ebe061b3_JaffaCakes118
Files
-
68a4d128bf8655df1ea17c21ebe061b3_JaffaCakes118.exe windows:1 windows x86 arch:x86
44d1d3622a1f568fe5a4988612a1b8da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
user32
MessageBoxA
Sections
Feokt. Size: 123KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE