Static task
static1
Behavioral task
behavioral1
Sample
b4ca448591ac3d7010ad40f62f3364e5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b4ca448591ac3d7010ad40f62f3364e5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4ca448591ac3d7010ad40f62f3364e5_JaffaCakes118
-
Size
18KB
-
MD5
b4ca448591ac3d7010ad40f62f3364e5
-
SHA1
71b5353bb1468b7b629fc1f9d941d83ee0cbddb7
-
SHA256
13f1e08e9f6ba04eb5a26b64119535672dadffa9c9d647c3ea7d66f4b55a7ac4
-
SHA512
cf703e656d3c6790fe6790072089d77353c37f47ca82bc04fdde27a3f176f6631a7ce9d9809c768a97c4b7b2248d61ed878c99a80b27b31e1c4c890e1d38a1df
-
SSDEEP
384:z4E/oFsRGPgpg3GvIC3PZ64CmG34KyyZdw8+M7Hx9dktOZAyA:N/EwGPkg3EPkiKyIdTHxfkIO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4ca448591ac3d7010ad40f62f3364e5_JaffaCakes118
Files
-
b4ca448591ac3d7010ad40f62f3364e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
4ab3bb2a684500a3f859fd458c2e62fc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
SendMessageCallbackW
CreateWindowExA
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 86B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ