Static task
static1
Behavioral task
behavioral1
Sample
d0b70bbd5b7e1f7a782b9450dccca8a8_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d0b70bbd5b7e1f7a782b9450dccca8a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0b70bbd5b7e1f7a782b9450dccca8a8_JaffaCakes118
-
Size
32KB
-
MD5
d0b70bbd5b7e1f7a782b9450dccca8a8
-
SHA1
705567ffca250d95f5195cf97e0b07895b07356f
-
SHA256
349577765f0e82e9500c6e1c0cf6c868dd0643ee972e5503815f13a55e467620
-
SHA512
0f8763cd35ce95359a88e703f9004b739f94bf5a6870a06d4f7090d9ccee980bd47f7eaa03b37a5019ffb51beb4569d9f8ae609b87eedec8cb7d61fdd940789a
-
SSDEEP
384:Tilr/gRcYG08fZjARGTlIwXty7dDMmjjpUG3cQH0QEvs1PK/E0epzZfV32Oqs/94:OroIZUoj4d/jpUGsjg00Ffp53L/KUW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0b70bbd5b7e1f7a782b9450dccca8a8_JaffaCakes118
Files
-
d0b70bbd5b7e1f7a782b9450dccca8a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE