Static task
static1
Behavioral task
behavioral1
Sample
d29790f2e06198660ad63d1ef49496ad_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d29790f2e06198660ad63d1ef49496ad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d29790f2e06198660ad63d1ef49496ad_JaffaCakes118
-
Size
24KB
-
MD5
d29790f2e06198660ad63d1ef49496ad
-
SHA1
ff7157dd1d4fffd7064394c7dc376c33984fd4be
-
SHA256
630b32c9f94f579fe526d9e76ed3b0040607435017af821f864652c4b886c220
-
SHA512
6779aa42cbeb2eeab32cdd1c060801c8b47eb51c4420bff36b8ab3a9b2b6647bc52f93ab801aafb2258b0d3a50f0ea7a2a0ef33fc188e356da322a9b001b8d59
-
SSDEEP
384:1sfGysE8uPuhlsu3Q/FHKkr95CEGfwKiD5qvVAcFIu9sg4:kGyCceQ/EkSEkK5Gku9sg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d29790f2e06198660ad63d1ef49496ad_JaffaCakes118
Files
-
d29790f2e06198660ad63d1ef49496ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE