Static task
static1
Behavioral task
behavioral1
Sample
8770b59eccb7d1af2ddda435d9e1aca9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8770b59eccb7d1af2ddda435d9e1aca9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8770b59eccb7d1af2ddda435d9e1aca9_JaffaCakes118
-
Size
32KB
-
MD5
8770b59eccb7d1af2ddda435d9e1aca9
-
SHA1
8ec44b89591ed04a6cf4a0ee45023fb083fa05b4
-
SHA256
0ca3105b38a4bd48b8f121c126a3211c2a2ba1bbc2d1788c7c79f45bf652d76d
-
SHA512
213ff9c79e3d4333d6e84281ef6866afd4fb2a6a310b4ea49bc17fae07ab7efdee38b15f5bd0560240f03f18b2f27c32fbaa59ac573693a9bcbbc5f4f4dd060f
-
SSDEEP
384:35y3iBcgI9XminxCK9JBf0TQT4+Pfbefr2DsjfYbH9:UimFBnx98TQT4qfbefqD4fq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8770b59eccb7d1af2ddda435d9e1aca9_JaffaCakes118
Files
-
8770b59eccb7d1af2ddda435d9e1aca9_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE