Static task
static1
Behavioral task
behavioral1
Sample
a4f895a93730b3c247528c8b4b0b3c93_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a4f895a93730b3c247528c8b4b0b3c93_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a4f895a93730b3c247528c8b4b0b3c93_JaffaCakes118
-
Size
24KB
-
MD5
a4f895a93730b3c247528c8b4b0b3c93
-
SHA1
070c1732ed6b61c7b300c246ada73825353a3e13
-
SHA256
854bc234e5d3b66891ea07a537d559b4d2feb23de7cfe786a89678a3b100c7d2
-
SHA512
37feec5cab8a3789d03bf9b21fd203e930b5a2723412cd0b7b18ab1dcc5504e96f927fc45d988585f98c9c2e06c67aabe6c1d0e6252bfafc709e899c35a5b746
-
SSDEEP
384:y0usCPkJ5VJDW1CAiU8v4e9PnNghQX+1k5sqXCmXxpa5Q6aDx7y30El/bPTauYUf:6sCktAiU9sNgk5sqXPXi5Q83P/bPGBy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4f895a93730b3c247528c8b4b0b3c93_JaffaCakes118
Files
-
a4f895a93730b3c247528c8b4b0b3c93_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE