Static task
static1
Behavioral task
behavioral1
Sample
f9dfda72e86e2740c53ad0d5a3f3fb69_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9dfda72e86e2740c53ad0d5a3f3fb69_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9dfda72e86e2740c53ad0d5a3f3fb69_JaffaCakes118
-
Size
114KB
-
MD5
f9dfda72e86e2740c53ad0d5a3f3fb69
-
SHA1
93ed2a6b36d5b92afb1860073eee1a539a9b7243
-
SHA256
c16a25fd53dcf64fa41a831cf14ace041c16ea51d0e69c3a2eac70af4ff5e8c2
-
SHA512
71ef3a7d33d779bfb7c8813624451f090c824b30f9a921b4d0d113b42c55f917f2002470ae8333e32c6752b35904f78e1926eb63c2b3355dbfcc0a1a7160900f
-
SSDEEP
3072:5Ej20mSznurwN7U9eypKJMjlZ03810txaka4Bv34XQfGmdfKVPYxfzvs8J:5W2U7eJpKJ73xxX/QXQtAtQJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9dfda72e86e2740c53ad0d5a3f3fb69_JaffaCakes118
Files
-
f9dfda72e86e2740c53ad0d5a3f3fb69_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE