Static task
static1
Behavioral task
behavioral1
Sample
d36f18dc0e1535bd6d8d0f1b580ff541_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d36f18dc0e1535bd6d8d0f1b580ff541_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d36f18dc0e1535bd6d8d0f1b580ff541_JaffaCakes118
-
Size
20KB
-
MD5
d36f18dc0e1535bd6d8d0f1b580ff541
-
SHA1
bac036f6316a8aaa39150ceed1201c113c870523
-
SHA256
c7f412460cabaf5653b2a89bb6cbae772a721da5b2308cb2527bac9d9678c3a3
-
SHA512
f99ee24eff5d326cfea4b9376e06abb1893e9074ad4244e5e5e29377f305d4818019c2f4fb5c29d5968ad54b6770747821b63d1b8913fceca74c3d3be3fbddd1
-
SSDEEP
48:/4+BG7xV1QHYFIyYiaSsOSnF1NqNqpFjXpTM3BUz2ZUx5R:76xQHYFIyYjSsOSn3oNqptP2ZUx5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d36f18dc0e1535bd6d8d0f1b580ff541_JaffaCakes118
Files
-
d36f18dc0e1535bd6d8d0f1b580ff541_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE