Static task
static1
Behavioral task
behavioral1
Sample
cf72b5b31b1ed9d45e387125cc3767d4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf72b5b31b1ed9d45e387125cc3767d4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cf72b5b31b1ed9d45e387125cc3767d4_JaffaCakes118
-
Size
113KB
-
MD5
cf72b5b31b1ed9d45e387125cc3767d4
-
SHA1
5a8bc633cfb48ed0fc0c2a22e563cd594088cbca
-
SHA256
0eb8d4ed19a72f256fd2a267d3f7465024f75f6eccb4763df1ad51f04b7ed96f
-
SHA512
f7cb7505a4d310fb5211b312ff5d4ea9f3cd5cf56b7bb6694319a3c1279f75647beaea4e08015c5150d17de456eaf70b27acc4086212d4ae71b4cb60a15b675a
-
SSDEEP
3072:fMkVNBDhpE0dZiEF0o7JgEt42m/1+b9xC:f3f9htdZiEVgM81+3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf72b5b31b1ed9d45e387125cc3767d4_JaffaCakes118
Files
-
cf72b5b31b1ed9d45e387125cc3767d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE