Static task
static1
Behavioral task
behavioral1
Sample
f0a471e4e2be8ab421fb0dd67c089c54_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0a471e4e2be8ab421fb0dd67c089c54_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0a471e4e2be8ab421fb0dd67c089c54_JaffaCakes118
-
Size
389KB
-
MD5
f0a471e4e2be8ab421fb0dd67c089c54
-
SHA1
695eb7c244fcee2bd6105eea3722b1914dbf1b11
-
SHA256
907339b5e9b43b901118293d10cb03c40a961f0daff0606297d3b6ebad6f80e4
-
SHA512
b5bd60df9450516ddd98a7d21717125585f69dffa93fc4874328fda05e8cfbacfefd1ac7190d45439a7067dbaf6cff545fd0395a47a87241350c60daf1052dc0
-
SSDEEP
6144:JHZQoo8W9Ox4QC3JSZDZiTgDaneMfM986RaM40PAsMq/h:nQoo86QPOJ+I0aeDdH4QM6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0a471e4e2be8ab421fb0dd67c089c54_JaffaCakes118
Files
-
f0a471e4e2be8ab421fb0dd67c089c54_JaffaCakes118.exe windows:4 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 59KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wini Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE