Static task
static1
Behavioral task
behavioral1
Sample
a43c83b9073e29f0c8d0d30113645290_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a43c83b9073e29f0c8d0d30113645290_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a43c83b9073e29f0c8d0d30113645290_JaffaCakes118
-
Size
43KB
-
MD5
a43c83b9073e29f0c8d0d30113645290
-
SHA1
ee56b9935d403e547831d8668a72bd7244295d5f
-
SHA256
2100423a18d9712da694fc50aca7763f9a4128282a416e94000b2733bc9db1b6
-
SHA512
472bf7e808f4e2ef9dc39975d97ea36ea78d01149a9077d301099d3ddb515f42689edb2dc11dfbf2b3936e500ce3f9d077659d146147cd6ec2e7cf7a4f2ddc48
-
SSDEEP
768:6wk6Ccri++/sh4pNNRREr3PjYYkPPjcUM3biVOZELBF5BShtUlkgJbGUkw18q:6wni++/Bq5kPPj3MWVOZELBF5BIulikJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a43c83b9073e29f0c8d0d30113645290_JaffaCakes118
Files
-
a43c83b9073e29f0c8d0d30113645290_JaffaCakes118.exe windows:5 windows x86 arch:x86
a40a3e2f813e1c45333f1b78f328ee72
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PeekMessageA
GetWindowThreadProcessId
kernel32
SystemTimeToFileTime
Sections
.vglyh Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.por Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wvubwj Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ