Static task
static1
Behavioral task
behavioral1
Sample
a42bceb61414e7a765b3229639102d17_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a42bceb61414e7a765b3229639102d17_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a42bceb61414e7a765b3229639102d17_JaffaCakes118
-
Size
100KB
-
MD5
a42bceb61414e7a765b3229639102d17
-
SHA1
623a93c916bcebd77d5e19c5fb4cd6ad63dc9aab
-
SHA256
a7d6bf25a6a394493dd4685a2fb61501876d69d777a0083d9d2ed548967f15f5
-
SHA512
31b6400555f731da738f8f47ab9fb83da44ee0124dfa6986d8248bd8961aa5a928f0c29982754f87cadad04228528b5a00cf616d38319504f369d6e1934996cf
-
SSDEEP
1536:MebCP3ycZOC4h8N3GCpWt6yzTltVamkznHOm1gVZ2vzEkd8SgX2KVDDXXTOAXj5j:tCP39OC1N2iWt/T8i23YX2aDTOAXj5j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a42bceb61414e7a765b3229639102d17_JaffaCakes118
Files
-
a42bceb61414e7a765b3229639102d17_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE