Static task
static1
Behavioral task
behavioral1
Sample
0949271b5cd6b12b279c226df4653d37_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0949271b5cd6b12b279c226df4653d37_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0949271b5cd6b12b279c226df4653d37_JaffaCakes118
-
Size
28KB
-
MD5
0949271b5cd6b12b279c226df4653d37
-
SHA1
c89900600358334a1a5ae16a78da67ff4876a606
-
SHA256
887f60d6c5ce060d03671084ab1bc9658ae71c49b099a1c049c8fc1c4532a74b
-
SHA512
b88d18d6962cc5b1cf20a7173f40d1e9fa15a9692be217aded0bc56e55bc995ec40a4d7d8ee9b96ee06d2b7b0806c5c67d4ade20959d9e64e45d9e25317f609f
-
SSDEEP
768:sNi45bB1CExy6m+Odt/q1LGyCpU65QkL0qVCL:cCL/qNXCWwQU0SCL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0949271b5cd6b12b279c226df4653d37_JaffaCakes118
Files
-
0949271b5cd6b12b279c226df4653d37_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE