Static task
static1
Behavioral task
behavioral1
Sample
bf0fdecfe5569e15a2a260f337d3756f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bf0fdecfe5569e15a2a260f337d3756f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf0fdecfe5569e15a2a260f337d3756f_JaffaCakes118
-
Size
106KB
-
MD5
bf0fdecfe5569e15a2a260f337d3756f
-
SHA1
d57ab0d3c8c572662932dae54a41d09ab1cfca12
-
SHA256
880f16ade5b55ec3ad84b6ed21b2d4dc816c0ff4cbcc65dd6131bc76c49feb00
-
SHA512
5f9f09aeb48aa4a7ac27f8c7e21ea8449984f63d1655bb703b5af34f1b0f0626a0ca5927782eec5ce5683683aac234598713d5d2fdbb1672cfb237eacebab493
-
SSDEEP
3072:dEULcFtUNkpDm74Xcjbi41X1Ur0e8YDFc5/Uk:pLcFK6E71jbiYX1O0QYc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf0fdecfe5569e15a2a260f337d3756f_JaffaCakes118
Files
-
bf0fdecfe5569e15a2a260f337d3756f_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c2d3c56017ffc9f272aae4a4d190dcc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
Sections
.pelock Size: 63KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE