Static task
static1
Behavioral task
behavioral1
Sample
ce91a8427a4727cd715e590e78b4a514_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce91a8427a4727cd715e590e78b4a514_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce91a8427a4727cd715e590e78b4a514_JaffaCakes118
-
Size
150KB
-
MD5
ce91a8427a4727cd715e590e78b4a514
-
SHA1
a963459f9af7ec98ed55f6bc6cc04e2c4e41a232
-
SHA256
197d60ba469dbe3c9f16342276f2eb9aa2766958f892e84eb755ede5dc8bb869
-
SHA512
8eb6711ef4a1463d14f30f6d450a91603529f429f439f3318087fbfd643a91f443ca51d3dfd11c2174880bb75d3e8390854bb16017fdd9b0395f7506ba9f11fb
-
SSDEEP
3072:qmXZAi/T9V7fsV+jTi8DoKjLbvTsZZgCw+9Hdyzdk:qmpAov7fpju6vQxT99r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce91a8427a4727cd715e590e78b4a514_JaffaCakes118
Files
-
ce91a8427a4727cd715e590e78b4a514_JaffaCakes118.exe windows:1 windows x86 arch:x86
44d1d3622a1f568fe5a4988612a1b8da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
user32
MessageBoxA
Sections
Feokt. Size: 149KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE