Static task
static1
Behavioral task
behavioral1
Sample
f08ae2a16f8f0a1865150734abcd8bd5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f08ae2a16f8f0a1865150734abcd8bd5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f08ae2a16f8f0a1865150734abcd8bd5_JaffaCakes118
-
Size
29KB
-
MD5
f08ae2a16f8f0a1865150734abcd8bd5
-
SHA1
9a5cc947792c4e67bcdc67daa912521064241100
-
SHA256
5ba71d26039255aff41a108a2f708f39264fb51878cb207d61e3fe293ee4b2ab
-
SHA512
48891600dd5559e6eadc75f00f82b03668163b63095929c78bac0766b76239378eff532f65ef7c9229aaab6af5c3c7377ddd9d0f0827f25435f6ed10e591fe09
-
SSDEEP
384:8MxvoDu+EJrhQYO4O+vu001THx/DFhdT9b34qFNo/sNaNv9yatqN52Eo:BoqtOt+iTR7Ft3NMcj2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f08ae2a16f8f0a1865150734abcd8bd5_JaffaCakes118
Files
-
f08ae2a16f8f0a1865150734abcd8bd5_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE