Static task
static1
Behavioral task
behavioral1
Sample
ffe1b5f2d3b167fb357732b9a8bcc9b9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffe1b5f2d3b167fb357732b9a8bcc9b9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ffe1b5f2d3b167fb357732b9a8bcc9b9_JaffaCakes118
-
Size
20KB
-
MD5
ffe1b5f2d3b167fb357732b9a8bcc9b9
-
SHA1
9cc3526ba2a035ced6753405b47fc5dce6ffbbc9
-
SHA256
39469f6383e233cf6c450309c77ab07a644fbf1a546b5a2037639b29c28137d9
-
SHA512
521cf001b8e4fa9bd99b0aba0c314ca450e26a0b8185cc8961f1def870401fdac99c33a6651eb1453bd5f7e6487fdfab56daf7ba20a2db991abc318c3fb98ebd
-
SSDEEP
192:lOU8cRnwTixLDaSd9pweHsvJTKEDU2aFGuxOFvosofusz:lOU8cRkixHh7weH12a9xOVvoX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffe1b5f2d3b167fb357732b9a8bcc9b9_JaffaCakes118
Files
-
ffe1b5f2d3b167fb357732b9a8bcc9b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE