Static task
static1
Behavioral task
behavioral1
Sample
a9b6f6961a84e10f04c3d9215f3ba7c8_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a9b6f6961a84e10f04c3d9215f3ba7c8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a9b6f6961a84e10f04c3d9215f3ba7c8_JaffaCakes118
-
Size
28KB
-
MD5
a9b6f6961a84e10f04c3d9215f3ba7c8
-
SHA1
0bd6fd412f145153bee4c680e4a97d94ef4dd95b
-
SHA256
04a99bbcbcc08676851a959fb0f95d23bc62121f8606564250efa195c10420bd
-
SHA512
d8f3e539098b3cec865f7c13fee6184b67a3ff1f81cb8693e6ed05158e7706788eaad98518c71c782f0504f1bb805ec946af714d16f6177c24a586e4997ab7ea
-
SSDEEP
48:fsxBGRJZKwM2qJ9nYlliDxebFIMvqPObb1BjB:4UosPisbGM4g1H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9b6f6961a84e10f04c3d9215f3ba7c8_JaffaCakes118
Files
-
a9b6f6961a84e10f04c3d9215f3ba7c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE