Static task
static1
Behavioral task
behavioral1
Sample
ce6e947671c922fdb4c66095c569d045_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce6e947671c922fdb4c66095c569d045_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce6e947671c922fdb4c66095c569d045_JaffaCakes118
-
Size
370KB
-
MD5
ce6e947671c922fdb4c66095c569d045
-
SHA1
d844758a9a5a6bed298a22b965d556720ac0a3b7
-
SHA256
55cba2dc3dccb17588f01e2c3d10a4ab7b393da88b0539ef8b33fb3431bcc1f2
-
SHA512
caf8885d82040e7aeaef120693cfa903e6dd6b4e3565fc1afe23e6a8c6472f05fa1046fbed7688b0c313c24470aea650aa2a2bca7438c8f193937ac1d92de01d
-
SSDEEP
6144:nUQOcsYqBVtZtAD7rh462pPUYGfOIi9fm7t1KVkOyRWvwPLxMYhTwWxbC9/cM7Rm:UQOcsYqDbSD7rh4tjIi1IUVgR+cCmu9/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce6e947671c922fdb4c66095c569d045_JaffaCakes118
Files
-
ce6e947671c922fdb4c66095c569d045_JaffaCakes118.exe windows:4 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 312KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE