Static task
static1
Behavioral task
behavioral1
Sample
cf19f8c0a50a3db4ab78eeac58cfa984_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cf19f8c0a50a3db4ab78eeac58cfa984_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf19f8c0a50a3db4ab78eeac58cfa984_JaffaCakes118
-
Size
24KB
-
MD5
cf19f8c0a50a3db4ab78eeac58cfa984
-
SHA1
8ee4f12e4da20edf98ca651feff55fb4cf3097c8
-
SHA256
f9f7139caff1c6187f05cd90d9c4873158d413cc7ca3cd74355265bca47108a5
-
SHA512
3a0d53bf915e96577d1dfd3b13807c5af9777d4c89762251ec8c378d53381b2bdb601c7b47aa3a52d440018af8edab5ba89852dcc8a31a7e0a87c35c4adf970f
-
SSDEEP
192:GTFbEiHpbHDafYF5He7CgmdPXzdQ3oZBTupNrYuJwMVlfAkVc:Gig1HDaKNelms3+xG9HCMVj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf19f8c0a50a3db4ab78eeac58cfa984_JaffaCakes118
Files
-
cf19f8c0a50a3db4ab78eeac58cfa984_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE