Static task
static1
Behavioral task
behavioral1
Sample
a58f3be954ada2cb6aeeef0b8bf1a908_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a58f3be954ada2cb6aeeef0b8bf1a908_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a58f3be954ada2cb6aeeef0b8bf1a908_JaffaCakes118
-
Size
15KB
-
MD5
a58f3be954ada2cb6aeeef0b8bf1a908
-
SHA1
779bec5df4e73b629668a6ac548ad7217fe41956
-
SHA256
9ab784e68b95250f33500ef9d917654e28e4da569a005693b966fd7fc1313f03
-
SHA512
751136264ee360c36c1b4fa1c96a8483905386c64a0fa82f6a48f3654081eb6fcbedb0092937e69ea8dd0cc673314ac88c26f604b9f42a9654eb40fa5aeb1304
-
SSDEEP
192:wVRuJplq77Fvi3dPF802Uw8r3SHl1G7d9nLD2bUwA+yrFQLB8Np2qzGE:wqi7ti3t2Uw8r3gyDUUwAPrFRNp2qz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a58f3be954ada2cb6aeeef0b8bf1a908_JaffaCakes118
Files
-
a58f3be954ada2cb6aeeef0b8bf1a908_JaffaCakes118.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE