Static task
static1
Behavioral task
behavioral1
Sample
b62c11edaea7ca0e2b330658ae335e25_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b62c11edaea7ca0e2b330658ae335e25_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b62c11edaea7ca0e2b330658ae335e25_JaffaCakes118
-
Size
15KB
-
MD5
b62c11edaea7ca0e2b330658ae335e25
-
SHA1
31c35a395364d3c8632f7ff53b97e5b154cd09c8
-
SHA256
904a9b86d46a6f5445442ccccfea149edbec0ffb9da402ca81519d65da2fade3
-
SHA512
215402b87f8de2716b682a367000edef73b3cacc2689420c0f84e950ffb7165d128500a461e568ec7f35763dfa7bd4efc58b75339d7ead1ef232a876ad5aea01
-
SSDEEP
192:9qTaTS0G9DMv81ch9gr/rx1Iz2rprZZWhWyc8RkOWd/AJS8d0:9qI+MvEchk/N1IzarbWXcTzd/Az
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b62c11edaea7ca0e2b330658ae335e25_JaffaCakes118
Files
-
b62c11edaea7ca0e2b330658ae335e25_JaffaCakes118.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE