Static task
static1
Behavioral task
behavioral1
Sample
ae61820d0b95d7cfc513f91be42a16a7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ae61820d0b95d7cfc513f91be42a16a7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae61820d0b95d7cfc513f91be42a16a7_JaffaCakes118
-
Size
32KB
-
MD5
ae61820d0b95d7cfc513f91be42a16a7
-
SHA1
aa199574230bb99e0ea420f212b573e6c2d03040
-
SHA256
c75cc0ebdfd5182540f3bcb093a34063f0affbd7236cc6e6664cf3b08ef4548b
-
SHA512
c4d52b017a2dc7a557f42f0a395dcdf8affdb14eb83fadfdd148e20e1ab7ace92493f7acaf4a3df2e963800e2f769f83d609c460d38d26fda1d79496fad0c8f3
-
SSDEEP
384:3npr2vafHMCYGtKkr8TqW7SiHWqEaOhcx+ZrMmTnE3:XGafsUNqE3hcE+kE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae61820d0b95d7cfc513f91be42a16a7_JaffaCakes118
Files
-
ae61820d0b95d7cfc513f91be42a16a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE