Static task
static1
Behavioral task
behavioral1
Sample
ce6ab221ba5ec0cf934a5f5ee1e3e7c3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce6ab221ba5ec0cf934a5f5ee1e3e7c3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce6ab221ba5ec0cf934a5f5ee1e3e7c3_JaffaCakes118
-
Size
4KB
-
MD5
ce6ab221ba5ec0cf934a5f5ee1e3e7c3
-
SHA1
bf4eee132f1bcbcd9a34c7f9bacebc450a201ed9
-
SHA256
6b03e2a21a1c9fa1a78cad6a82a187488dc90a79e0e144c0299633a0f1fcd205
-
SHA512
ef0b733d3cbeb14093011fd92e9b7eaec7095ac2d7ad404baa9cf91f3a1cc16635f34e47eea34672047b397038a0f94b2e4a66ffe089a2c86308ffe64c178114
-
SSDEEP
96:aeYSXoQg39egNUsFYrzReslzzM4R3VU3C+WPKgT4D3t:vYQg3WeY1eslzzXh//T4D9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce6ab221ba5ec0cf934a5f5ee1e3e7c3_JaffaCakes118
Files
-
ce6ab221ba5ec0cf934a5f5ee1e3e7c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
ff977b909b112e1df08226b28cb01fcd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamA
SetDlgItemTextA
MessageBoxA
EndDialog
kernel32
GetModuleHandleA
ExitProcess
RtlZeroMemory
CreateFileA
CreateFileMappingA
MapViewOfFile
GetFileSize
UnmapViewOfFile
CloseHandle
comctl32
InitCommonControls
comdlg32
GetOpenFileNameA
Sections
Ru-Board Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE