Static task
static1
Behavioral task
behavioral1
Sample
a6f9483931cfc885ec5ae0a586014e7c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a6f9483931cfc885ec5ae0a586014e7c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6f9483931cfc885ec5ae0a586014e7c_JaffaCakes118
-
Size
21KB
-
MD5
a6f9483931cfc885ec5ae0a586014e7c
-
SHA1
b4437e300d4d7c757d00d496ab3ac4988d1aeaec
-
SHA256
c83fe79aace6ff876b7c5dd11d5c193bf934f8447e4941639c745a90c71ec538
-
SHA512
f8f37d963786842d4f1126c62f922d231e24d395ad6a81fd37be43c06c642c732bbbaf27a256d471db6a17c9c285649d0c7343a7317d57f5e78d4ff627d8d0cc
-
SSDEEP
384:TjhJ2HT1G3nMLj9RqKXoL6F7JG132c2dnHm8B54mmL0OiuaaW0:TjCHRQML0Y7JKURG8ZuP3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6f9483931cfc885ec5ae0a586014e7c_JaffaCakes118
Files
-
a6f9483931cfc885ec5ae0a586014e7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
CODE Size: 7KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE