Static task
static1
Behavioral task
behavioral1
Sample
abf3221ee5fef4aa5c4998eec14df4c7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
abf3221ee5fef4aa5c4998eec14df4c7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abf3221ee5fef4aa5c4998eec14df4c7_JaffaCakes118
-
Size
143KB
-
MD5
abf3221ee5fef4aa5c4998eec14df4c7
-
SHA1
441b7c2bed8e9e54e7ee3d69060b1b91785e59ca
-
SHA256
953931a0eeb29b08961e66a461f985e3919f229def9496242a77385e219a5f3c
-
SHA512
aa63d06a9a40b99d7e7d94a1a303160e1dfe18ef78d9dd74bf38ca127ddc1957b1d00993c6638f3da40af9460680657a3b689d3d4168a703687a487eb9969f75
-
SSDEEP
3072:TWCatX3+RmgXUgOgRfFpibD+r/hGZp0lg:TWddgXUgVBibDW/8Y6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abf3221ee5fef4aa5c4998eec14df4c7_JaffaCakes118
Files
-
abf3221ee5fef4aa5c4998eec14df4c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
ICU Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ICU Size: 3KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ICU Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE