Static task
static1
Behavioral task
behavioral1
Sample
beae879d042ccabf8c75297356fe50b1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
beae879d042ccabf8c75297356fe50b1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
beae879d042ccabf8c75297356fe50b1_JaffaCakes118
-
Size
664KB
-
MD5
beae879d042ccabf8c75297356fe50b1
-
SHA1
60b95bf7f0e2a9ab651086a696defced10279b98
-
SHA256
4d9390890046febb812c0b35923461f874ecbe1a825aeb73fd92bd6e75a6da95
-
SHA512
bfb18d15a08009e98c1480d78e93cc26a66183c2ac3dcf6d746a7d234ac39ec6d92266bfd8241b121b5829918253f50148382fcf2819731985d30f9b5d9ce92a
-
SSDEEP
12288:dMNBRhGcJW881o7d3dcN54Mi4dDtmbSpf9bUFqd8q/eTIocsHDLk5Q:27J61oldPoDWSpf9bUFLq2Tlc0DmQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource beae879d042ccabf8c75297356fe50b1_JaffaCakes118
Files
-
beae879d042ccabf8c75297356fe50b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
aadf5c8667fe05f652d8f2e502e2b9d7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
GetModuleHandleA
GetProcAddress
Sections
.text Size: 432KB - Virtual size: 431KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ