Static task
static1
Behavioral task
behavioral1
Sample
ade538237d5084cc805a88f9378cd5e5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ade538237d5084cc805a88f9378cd5e5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ade538237d5084cc805a88f9378cd5e5_JaffaCakes118
-
Size
18KB
-
MD5
ade538237d5084cc805a88f9378cd5e5
-
SHA1
4325c6f577e9b8abae639933a7cf53083f2d18b8
-
SHA256
e549c7f4d657ed6307f84fb9c235d2f9c7058ab7f719c2e4846dcde534385661
-
SHA512
a54098ecac08d5a4797561aba131a2f7f30693ccf715fefa46e36d1a11e27e0df19eb961e94c99ddebb34c3290f78e35537fd2502e9355846678eeea68e7fd95
-
SSDEEP
384:Z6ZTNGhL3lFFRIt06f1NN9h43rmaqXZZ9SKHDRvLYUL/HUKt/82/D7LXMANa:gZchL/FGtf1NN9h+rmaqXZZ9Scdv0U/y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ade538237d5084cc805a88f9378cd5e5_JaffaCakes118
Files
-
ade538237d5084cc805a88f9378cd5e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
73a1bb7671608349cf079bfc69a5b584
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamA
kernel32
GetModuleHandleA
VirtualAlloc
comctl32
InitCommonControls
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ