Static task
static1
Behavioral task
behavioral1
Sample
0569c518828e9af71ae3be19f1b55196_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0569c518828e9af71ae3be19f1b55196_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0569c518828e9af71ae3be19f1b55196_JaffaCakes118
-
Size
444KB
-
MD5
0569c518828e9af71ae3be19f1b55196
-
SHA1
3007fed9103077732bea9052fccfc518a6963892
-
SHA256
e78f86ebfb35ed9e64821d47cc7d482cb2f96c3f3a82998ded01d3e377e1dca5
-
SHA512
7324a23c3954a7cf9b5c858acaadfa5f22d7c87fd86c63814156284088790fbc134c989d2fe241118757f8977eac97581efd715dc4df01d20edb30749b2d359e
-
SSDEEP
12288:xCTPgrnZiJiAaMVkUet7EwBI+APuiDrVkP+xnXOBI+AM0FSDyo1tj0:xCTPMAzVkUetVI5ui/VkP+x6IS0sDyoI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0569c518828e9af71ae3be19f1b55196_JaffaCakes118
Files
-
0569c518828e9af71ae3be19f1b55196_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
.petite Size: 44KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE