Static task
static1
Behavioral task
behavioral1
Sample
b1a29fb0a608a4c21f6b615e562af9f2_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b1a29fb0a608a4c21f6b615e562af9f2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1a29fb0a608a4c21f6b615e562af9f2_JaffaCakes118
-
Size
165KB
-
MD5
b1a29fb0a608a4c21f6b615e562af9f2
-
SHA1
e3a0cd29c73e3fd1e402977f8cdd0c7c2b7ef54d
-
SHA256
0f46b506e094f26e8936e6218439919d7f60f6b325e01efd0aa798bc8567f18c
-
SHA512
c196c28cff881568928cc201d01a22b76455b9ab215575759f5598ee4c7c277034c55591fe22856af275b9b7c97a3b02c16a606eea0474d7a06e70f0042ea28b
-
SSDEEP
3072:y79JuB/RVgU974KlGro2UWQRtgxC6c3ovNRdNUirqSmF7Nv5BdVa0jZGlbq:yLmVJ974KlGM/g46cYVWimF7htZGVq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1a29fb0a608a4c21f6b615e562af9f2_JaffaCakes118
Files
-
b1a29fb0a608a4c21f6b615e562af9f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
c22d1f698ed886e6f29d6405a3cd6a04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
LoadLibraryA
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE