Static task
static1
Behavioral task
behavioral1
Sample
065c7303f62a489c8cf1bc169f6c6b17_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
065c7303f62a489c8cf1bc169f6c6b17_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
065c7303f62a489c8cf1bc169f6c6b17_JaffaCakes118
-
Size
59KB
-
MD5
065c7303f62a489c8cf1bc169f6c6b17
-
SHA1
b1c82d8c237bbbcfafcde9eb4001e05f353117c3
-
SHA256
62388d48f212fd63fb0f7082e8cbbc89e3296008a5adabefa2e1a747dd716173
-
SHA512
d0e3e95c4e3ca91fb7d46c27cbb48c77134693d7b53ecdba645b4a2cc5bacd473428041cd7481e56b83df1c29939d974c6b40ff748aa2c4f173ed74b1b430dd1
-
SSDEEP
768:ZBthqwMuAzpBheqUhh79uwH3EKzZmLGKiQk8lVLpcBL1:Lnurhejr9uwH3MK1QRKBL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 065c7303f62a489c8cf1bc169f6c6b17_JaffaCakes118
Files
-
065c7303f62a489c8cf1bc169f6c6b17_JaffaCakes118.exe windows:4 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE