Static task
static1
Behavioral task
behavioral1
Sample
fdf99f9b283e665a0389a76d302847d0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdf99f9b283e665a0389a76d302847d0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdf99f9b283e665a0389a76d302847d0_JaffaCakes118
-
Size
20KB
-
MD5
fdf99f9b283e665a0389a76d302847d0
-
SHA1
3a7870bc9ae8999a2b40335a93fc6a188e7c477b
-
SHA256
8e2de690d1d5888ee718400212c8bc2a2e3f81f9daeeffa1a561be2f56f56910
-
SHA512
c77cb76ff986fdc71c766afaa487bb49f2ef252ca13c44a9c783c01c9a91cd2beb1373e5f149143fd3c9b5a18d28a589761dbb73b040ddf74ca7d37a5f5f79c7
-
SSDEEP
384:jsTc2TaCRZPaZB1pUaezYDP/7nUOvQ7F6AIubRypbqeR3Gu4Hi1zslLg:SriSaezYDgJ6wbRykelG9/s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdf99f9b283e665a0389a76d302847d0_JaffaCakes118
Files
-
fdf99f9b283e665a0389a76d302847d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE