Static task
static1
Behavioral task
behavioral1
Sample
a968170bbf0a6bed23ccd19e7988ad2b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a968170bbf0a6bed23ccd19e7988ad2b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a968170bbf0a6bed23ccd19e7988ad2b_JaffaCakes118
-
Size
25KB
-
MD5
a968170bbf0a6bed23ccd19e7988ad2b
-
SHA1
497f0d787b72a67f04ee34746ffaee634d2ef62e
-
SHA256
38be79f38268bd52ed841bd83922a415f59d0af350e987a2cc6830ef72dc2c1f
-
SHA512
5bc9063ca3e556f511e4d4220315b09d21e28e106614846bae72d7a47d9feb93ecc9df7e31cec4d4a83d82240d5762e2a73d10fbe6cc0d3e5b20638e54c0cb99
-
SSDEEP
384:/TCLkNFtv41dZ17mDmcr9z/Fo8InCNurbI5cLlIYMIf3d2AArh1BYKDpKDxKD8:/uLyFt41sThTz14rbIqqSGB0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a968170bbf0a6bed23ccd19e7988ad2b_JaffaCakes118
Files
-
a968170bbf0a6bed23ccd19e7988ad2b_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
.text Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE