Static task
static1
Behavioral task
behavioral1
Sample
bab9156c3ae39f4df7dc7bb795c0d127_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bab9156c3ae39f4df7dc7bb795c0d127_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bab9156c3ae39f4df7dc7bb795c0d127_JaffaCakes118
-
Size
28KB
-
MD5
bab9156c3ae39f4df7dc7bb795c0d127
-
SHA1
1dbdcce6b25cb6e0370fba709e29ff9d3a2065b7
-
SHA256
7363fc80698f387cdc07b87f683f89d659966de2eadc401461853a0cadebc04a
-
SHA512
0f90c465e0c44b0fc6b631ae93132f9eacbf96630dd67c9bfe588d8c00bf7e3cf32448d4af94ebca9b27ff85adacde36d673188169b02e9a53f744415dba3a6f
-
SSDEEP
768:L/XqN0883EpopykSMe82r/m5Q4QZNgOF87EQgC+FgtHOd4GfC3mpaTYs:LSe88qoQPLR/61W+Oyj1+aROWGgfEs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bab9156c3ae39f4df7dc7bb795c0d127_JaffaCakes118
Files
-
bab9156c3ae39f4df7dc7bb795c0d127_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE