Static task
static1
Behavioral task
behavioral1
Sample
a8e89cdb518faccdf334602beec9205c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a8e89cdb518faccdf334602beec9205c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8e89cdb518faccdf334602beec9205c_JaffaCakes118
-
Size
164KB
-
MD5
a8e89cdb518faccdf334602beec9205c
-
SHA1
5f43a2f76f604469890af002f1e1843d652977eb
-
SHA256
b16e7e9e52c8fc3de83eb2c0895e846ad4b8060f8f1148dadd8a56466d3ad8b7
-
SHA512
7f77c295011af6218dc01bf1cb6d35eb32baf5d4a33ad018993c6d6215ba72b34219a590ffbca7f90ed7f719ff40617675b269ddd4e0c6eb55690fc9168d0bb7
-
SSDEEP
3072:wvY4JqalzNAk9JuB/RVgU974KlGro2UWQRtgxC6c3ovNRdNUirqSmF7Nv5D:wvY2qaZNAYmVJ974KlGM/g46cYVWimFn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8e89cdb518faccdf334602beec9205c_JaffaCakes118
Files
-
a8e89cdb518faccdf334602beec9205c_JaffaCakes118.exe windows:4 windows x86 arch:x86
c22d1f698ed886e6f29d6405a3cd6a04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
LoadLibraryA
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE