Static task
static1
Behavioral task
behavioral1
Sample
b1815a454d64a251360c5a9abe8791ac_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b1815a454d64a251360c5a9abe8791ac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1815a454d64a251360c5a9abe8791ac_JaffaCakes118
-
Size
75KB
-
MD5
b1815a454d64a251360c5a9abe8791ac
-
SHA1
1c556fbbbc17f765055490519a196cf615304be8
-
SHA256
4aba53bbba7a053954acde1dc6fd99a09738affb7f55e7b141d039f094d07adc
-
SHA512
fe8bf7f513a980f4fe462a93071de03b3ecd92c5463c3e7f9fa9ec53f9822f8958f7cc4d8a625a2661e613267cf69894debe74b086e31aac5c03f5c5e67a1e05
-
SSDEEP
768:4DZAvyIUFtXSoy0yjEcwDPSjyUqwlzZ97iB32Lrh5LG8R4XeStKDp0pWwEIR9hSm:9vy7FtZyAcwKFiBmLrSA4XJtKVWFDhhX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1815a454d64a251360c5a9abe8791ac_JaffaCakes118
Files
-
b1815a454d64a251360c5a9abe8791ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
jpeg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jpeg Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jpeg Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
avi Size: 11B - Virtual size: 11B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ