Static task
static1
Behavioral task
behavioral1
Sample
c92a7e67d306ba05b522c9f525c0ec0f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c92a7e67d306ba05b522c9f525c0ec0f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c92a7e67d306ba05b522c9f525c0ec0f_JaffaCakes118
-
Size
108KB
-
MD5
c92a7e67d306ba05b522c9f525c0ec0f
-
SHA1
1f6dc0675ba6116fbb770ae4520f0b2d0c5458ea
-
SHA256
11b809aef448f05ffdbac6b7081842beef02f719d164ef8d7376022f090372ea
-
SHA512
adc0bcb8b485d963901485d088fc896c817c86907df8ab59e03b06056bb643e8afe3e70e70da49442066377b5c4e929d3c9203ac63c8dc14f79bae5f1d17da8a
-
SSDEEP
1536:ir7qqdoG843uYHthNVdLSXVkGdjMWCUel/kL+ml5NqzMldXePm8450QHA50VtPSP:ir7qHLoLO9CUwkL+y6MldTO93p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c92a7e67d306ba05b522c9f525c0ec0f_JaffaCakes118
Files
-
c92a7e67d306ba05b522c9f525c0ec0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE