Static task
static1
Behavioral task
behavioral1
Sample
bb2ea5fd59a750513f8b2154cae81a12_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bb2ea5fd59a750513f8b2154cae81a12_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb2ea5fd59a750513f8b2154cae81a12_JaffaCakes118
-
Size
8KB
-
MD5
bb2ea5fd59a750513f8b2154cae81a12
-
SHA1
d476b8e6759b00e7a39b00604815fa9e6bd09f44
-
SHA256
c29791f0b30db36bd705e06e2649436726ef5bac29210f9602613e5da43f5391
-
SHA512
121c383d2e34444672a1a8face50c12b91b01f026a408e7f4d1ef1fee998ba6b0267d5a158b482de993c93fb6ccd43fc61423d1eb95649cb6bd33d77756941b9
-
SSDEEP
96:nP/6p3Y7hgbgNi0VjcBacM0oIz3PZ5Pj1JLUVFLIf35FMGZO:nqp3OGgw7Bacy0fZZj46HMG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb2ea5fd59a750513f8b2154cae81a12_JaffaCakes118
Files
-
bb2ea5fd59a750513f8b2154cae81a12_JaffaCakes118.exe windows:1 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
CODE Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ