Static task
static1
Behavioral task
behavioral1
Sample
e9db569188a0b8bfeefe948e6492ebad_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e9db569188a0b8bfeefe948e6492ebad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e9db569188a0b8bfeefe948e6492ebad_JaffaCakes118
-
Size
40KB
-
MD5
e9db569188a0b8bfeefe948e6492ebad
-
SHA1
650f5028fbaa1f643f8f4e64ec97e565ffa92d59
-
SHA256
6b25c4188f002883081a141c4e9ac629273f8a9a682fd4bcc4a820debc5585a3
-
SHA512
434c861e7b431036e0d542549b393541d24bea50a2f24e03e4cafc3323dc83dc33ac92274adfda992a6aef285e6076552c7524da5cb7e4732f90e4a78997767a
-
SSDEEP
768:oL0L6yCv2xorQ/wjq6+5fVSAIHzM5ux45DPAFgkq9D/psr1T:oL0GyCv2Wl+k9TfiNLD/p4T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9db569188a0b8bfeefe948e6492ebad_JaffaCakes118
Files
-
e9db569188a0b8bfeefe948e6492ebad_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
Size: 16KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE