Static task
static1
Behavioral task
behavioral1
Sample
bd150a608225405ec3aea174ca1d8f75_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bd150a608225405ec3aea174ca1d8f75_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd150a608225405ec3aea174ca1d8f75_JaffaCakes118
-
Size
98KB
-
MD5
bd150a608225405ec3aea174ca1d8f75
-
SHA1
fa2f5deb63f38c6f2e41b307a3aed8a9a3273e75
-
SHA256
1afb41f200d5f6811a0ac4f491592e2c841431774bd82714f18c7b965484cebf
-
SHA512
c140c322e100a28c6a88a4d1ba42b81897906af70c4a85e374117a5f9577411bb777a90a7d507b4135acdab3023f8a6501b8c0c70ae9ee0b6bf41dc2dc3db77b
-
SSDEEP
3072:zHDvtru9n3eM9CfBLTZzePuYKFvBl5A8zgiz:zjvtru9n3eM9WTZzqc99zg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd150a608225405ec3aea174ca1d8f75_JaffaCakes118
Files
-
bd150a608225405ec3aea174ca1d8f75_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 820KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE