Static task
static1
Behavioral task
behavioral1
Sample
6fb306d6f5a5b895fd4b2f96c4e945ca_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6fb306d6f5a5b895fd4b2f96c4e945ca_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6fb306d6f5a5b895fd4b2f96c4e945ca_JaffaCakes118
-
Size
24KB
-
MD5
6fb306d6f5a5b895fd4b2f96c4e945ca
-
SHA1
580152983806fc1e231f8d7a6fbffab6eb66746d
-
SHA256
779bc88ac51f5aedadfb4b9cf1278689931b139b35495a1d1a00f8f708766101
-
SHA512
356a36ef2909930f3ff86694eedad27ebbf080bc1e192a261cb12126eb634bb1a21b61d75361236b30afb785ed58776129f2a8484bbc1f1c300ce04839870d56
-
SSDEEP
768:4J4RN1NioLbZBWqDk+WL+Ox6PiPKxGIEq:4O14oHNDk+6IPiPnIEq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fb306d6f5a5b895fd4b2f96c4e945ca_JaffaCakes118
Files
-
6fb306d6f5a5b895fd4b2f96c4e945ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE