Static task
static1
Behavioral task
behavioral1
Sample
0057beddad1b22ac9a4053f6d14dafe3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0057beddad1b22ac9a4053f6d14dafe3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0057beddad1b22ac9a4053f6d14dafe3_JaffaCakes118
-
Size
28KB
-
MD5
0057beddad1b22ac9a4053f6d14dafe3
-
SHA1
106c38b67838d3d71e9d88113ef4d944b040bbbb
-
SHA256
bb1e1bd76d1129d5035fe17213814d5e19e0db51a87f75522859f5deb1c47e61
-
SHA512
373e676d69e5b93090e7f0a2e04d5c4b9d4b4c89050663f248156c713713f4c7efefb0c79ad05b55bcace8bc436a41127a67b516d9e504f18bddc5952895d301
-
SSDEEP
768:3UMGpZU4TRK8nFtkWjdHZIVwGHEtIX1TSPMiDpkdnOWKHER:3UM2U4TRPFtkQF+6GkE0jpk1OBHE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0057beddad1b22ac9a4053f6d14dafe3_JaffaCakes118
Files
-
0057beddad1b22ac9a4053f6d14dafe3_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE