Static task
static1
Behavioral task
behavioral1
Sample
b198cbd97f37b2386d2e8f16c3f79708_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b198cbd97f37b2386d2e8f16c3f79708_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b198cbd97f37b2386d2e8f16c3f79708_JaffaCakes118
-
Size
32KB
-
MD5
b198cbd97f37b2386d2e8f16c3f79708
-
SHA1
cce3b3fcd438ce676515c8e170a053e2be78e9c2
-
SHA256
5e5940c8fd6aac1f88ea687689f0612a7201384cfb866467492aa399755da43c
-
SHA512
67e1f533d1f4f6aa99c54c869a981fc69e4263b7128b2875f561e913be5160009863d42348c8b98743a5d7b5751397355f69aa808d3be90f6307dbc5fef40c84
-
SSDEEP
768:QX+h5G7dIndwF4HUIe/km2ZJV/A63gwdMe:kq5GRSPHmUZJu63x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b198cbd97f37b2386d2e8f16c3f79708_JaffaCakes118
Files
-
b198cbd97f37b2386d2e8f16c3f79708_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE