Static task
static1
Behavioral task
behavioral1
Sample
960f7fef0d3c1741132ad9d6805530ed_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
960f7fef0d3c1741132ad9d6805530ed_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
960f7fef0d3c1741132ad9d6805530ed_JaffaCakes118
-
Size
14KB
-
MD5
960f7fef0d3c1741132ad9d6805530ed
-
SHA1
7ed096fa76c789b4413d00ee79f92aaf60bc001d
-
SHA256
e1eb441e3eeda661230d66075555976bb2efd52705cc5f53f3557045a5520296
-
SHA512
fe6f362386a7e594c3ebf0470194a48d7fe1f1718136dda87c72fe546e198d6ba2beceb37f5cba62b7afc2633907cf8a05bb839063379d0fb4358fc35002b706
-
SSDEEP
384:iLpCJvzf8v+YDnNfqs0jX06enkrrgCHxU:eCwvpNyk6hrFHx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 960f7fef0d3c1741132ad9d6805530ed_JaffaCakes118
Files
-
960f7fef0d3c1741132ad9d6805530ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
bb01a0fc3b776b726f021c130629577a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualFree
GetModuleHandleA
user32
MessageBoxA
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�0 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE