Static task
static1
Behavioral task
behavioral1
Sample
b479bcca7b508386992b928bd007a325_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b479bcca7b508386992b928bd007a325_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b479bcca7b508386992b928bd007a325_JaffaCakes118
-
Size
80KB
-
MD5
b479bcca7b508386992b928bd007a325
-
SHA1
c3375753c301c13608afb34a0989acf3e0a800c3
-
SHA256
4f2d4bcffc2522c97cf54702ba233df065873cc52016cdd31fdc93a9d1774290
-
SHA512
da6d2ae671b4682bd4df2f1ce22a0813c85d7b0e6e846d114247ae389d92efb41425bf739d7e4ec997bf9064ea0da6f5c6e52a9a4f9632eb96bb53197bd85b38
-
SSDEEP
1536:+rJ+hPePRMi6o+r2Aou/vZSbI5p3oPQrgcDvTu/00gPniAYJdCwxK6IA:+rCmPRMXZBDZSbY30QrgcDK/e/iAYPr/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b479bcca7b508386992b928bd007a325_JaffaCakes118
Files
-
b479bcca7b508386992b928bd007a325_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
PEPACK!! Size: 47KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 7KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE