Static task
static1
Behavioral task
behavioral1
Sample
b2c79d7bde22893a8d48370756a5d5ad_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b2c79d7bde22893a8d48370756a5d5ad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2c79d7bde22893a8d48370756a5d5ad_JaffaCakes118
-
Size
20KB
-
MD5
b2c79d7bde22893a8d48370756a5d5ad
-
SHA1
8eb54ca657b4841ea9885444d61c259041b6d95d
-
SHA256
8958c2bcd6dfdb53ae64fb0f781f8f24dc1a7e4ae687dbfb9939a71d28d76083
-
SHA512
826a008497bd41022eeeeb29f5d91a736c6072541b67d8b58bd59689d5164ecd5b666d75bbea2547e94c326246870011b4ae7edb85234139232f5ffb80e54a18
-
SSDEEP
3:WlW7g//SRqEVFnrlltvl7//llrllw/dldt1l9tllFllJllPtllUlyvVl//lLFH9N:iz3SsE7MvS2eApxGlBORIBvuJKQmQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2c79d7bde22893a8d48370756a5d5ad_JaffaCakes118
Files
-
b2c79d7bde22893a8d48370756a5d5ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE