Static task
static1
Behavioral task
behavioral1
Sample
cde661d41e0a073b7d0d2439694fa4c1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cde661d41e0a073b7d0d2439694fa4c1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cde661d41e0a073b7d0d2439694fa4c1_JaffaCakes118
-
Size
506KB
-
MD5
cde661d41e0a073b7d0d2439694fa4c1
-
SHA1
743f4136e29abb6dee59e565df3abd9f0ce371d8
-
SHA256
91d36f145f784b5622b551a9cca04295060c79720dfe5ac9edf4af4fcce831a3
-
SHA512
c7b64c01e47d7f2a87c660ecbdcee2951356285f72caba3751b304fd84ab8c877d06e3744077d4498e301141c0db0ccdc23dd939bc3a6a032eca389b3ecdc2b9
-
SSDEEP
12288:aGeNND6BVZz+4qA/jQZraJbtbipcFR1oZ:FeNgBVYY/kZraJbZipcjk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cde661d41e0a073b7d0d2439694fa4c1_JaffaCakes118
Files
-
cde661d41e0a073b7d0d2439694fa4c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
a2ff0232782ce7b9ea7da96309db0014
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
CreateFileA
VirtualAlloc
GetModuleHandleA
CloseHandle
ExitProcess
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 242B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ