Static task
static1
Behavioral task
behavioral1
Sample
b57f9e302cf50195ab2917840366dda9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b57f9e302cf50195ab2917840366dda9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b57f9e302cf50195ab2917840366dda9_JaffaCakes118
-
Size
214KB
-
MD5
b57f9e302cf50195ab2917840366dda9
-
SHA1
af0f0e46c245d1e1ba5bbb7d7b52c615b72b9fb0
-
SHA256
41d2b361ce559c6fee6f5ddbbaf929b551055f0a63c21227ee07212c3ececf32
-
SHA512
3f7a71734343269fac30739f5220efa9848aaed63c8782e2e6c04f4e2e5f1ef48025d71074e9b77fc4d9ecc12ba351c4c3506cdf394a13562b6a6f6037359c2f
-
SSDEEP
6144:QdtN0azhbO5ZvcGQa5K5LKiIHvuBYL87COoB:Q9dhbO55cG556WikvuBm87HoB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b57f9e302cf50195ab2917840366dda9_JaffaCakes118
Files
-
b57f9e302cf50195ab2917840366dda9_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c2d3c56017ffc9f272aae4a4d190dcc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
Sections
Size: 154KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 32.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE