Static task
static1
Behavioral task
behavioral1
Sample
b42c51ac1a655413cd0646c47f5db1d5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b42c51ac1a655413cd0646c47f5db1d5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b42c51ac1a655413cd0646c47f5db1d5_JaffaCakes118
-
Size
229KB
-
MD5
b42c51ac1a655413cd0646c47f5db1d5
-
SHA1
8af63902a4a8e2dad5f5eb9193ef058c9a721aef
-
SHA256
88b8ee2336472bd8fbf4bd29e1d3f3bec4de11f24b5fe428603b0787882f31a4
-
SHA512
7fc88ab2b91c3bb75822c4a544270fb0439070939a6e0eb6d5dadeb640770c6f168a8275baab1de6e7174e71e082117ab560c4a520410597e0a8bc6e7d9ebbfa
-
SSDEEP
6144:zd6XAnnWrm7I6hKsu2/kFWemxJnOLoK+BK:zd6QeUhKsu2/0mxJnEoK+o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b42c51ac1a655413cd0646c47f5db1d5_JaffaCakes118
Files
-
b42c51ac1a655413cd0646c47f5db1d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 63KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE