Static task
static1
Behavioral task
behavioral1
Sample
84a9847c306515d43803fd15905925b9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
84a9847c306515d43803fd15905925b9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
84a9847c306515d43803fd15905925b9_JaffaCakes118
-
Size
331KB
-
MD5
84a9847c306515d43803fd15905925b9
-
SHA1
ff301457d26f3c7b5f36a0f03df30e5a8c479c4a
-
SHA256
f3b63f9ea41b09c50dd3c3d16905b006949de421a9800b9abe6ae115c2968100
-
SHA512
4cc611fc38049e0dffb960d5dd4b7cbad06b59ffe11c7ac875f60df51fb86c8c11ec6fdb2db0636806ebbecf25fdca19021b1d041b6e809ba3765e68aa123b0b
-
SSDEEP
6144:/qLm3VMm6yCXt4oQX7dDb/wyxlRIgjbhUS0al8VXHU8gh/p+pem2nWW8RXLoOklG:/rq8qSoQX7dDNI4hUSw08Wp+p2WR5k6L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84a9847c306515d43803fd15905925b9_JaffaCakes118
Files
-
84a9847c306515d43803fd15905925b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
315fa125a75eb80ffd3202184a3c969d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
msvbvm60
EVENT_SINK_GetIDsOfNames
Sections
Size: - Virtual size: 4.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE