Static task
static1
Behavioral task
behavioral1
Sample
ded14fdd9d79bb3755fe606058ad0ae8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ded14fdd9d79bb3755fe606058ad0ae8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ded14fdd9d79bb3755fe606058ad0ae8_JaffaCakes118
-
Size
18KB
-
MD5
ded14fdd9d79bb3755fe606058ad0ae8
-
SHA1
f6669b189ae7314cbb6097247b3a4a0ecc60fcaa
-
SHA256
be9030e29cb6a9208cc20ca449be751169d7856bcba285ab33ba0f9f7e16a7cc
-
SHA512
97ae5e9fb3cd6951479220640049db85d58d8bfc673c318401c60dc71727e1ff81e8024d3b03dea07b56f9e988d1623ed20802e10a95e266890c30ae5f5c9022
-
SSDEEP
384:/6ZTNGhOj4kWcpYVt06f1NN9h43rmaqXZZ9SKHDRvLYUL/HUKt/82/D7LXMANa:SZchk4ZcpMtf1NN9h+rmaqXZZ9Scdv0j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ded14fdd9d79bb3755fe606058ad0ae8_JaffaCakes118
Files
-
ded14fdd9d79bb3755fe606058ad0ae8_JaffaCakes118.exe windows:4 windows x86 arch:x86
73a1bb7671608349cf079bfc69a5b584
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamA
kernel32
GetModuleHandleA
VirtualAlloc
comctl32
InitCommonControls
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ