Static task
static1
Behavioral task
behavioral1
Sample
118000e3d539e226b5f405400660471f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
118000e3d539e226b5f405400660471f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
118000e3d539e226b5f405400660471f_JaffaCakes118
-
Size
24KB
-
MD5
118000e3d539e226b5f405400660471f
-
SHA1
0cccbb25c7a9c5599276abc813d6019984ad6907
-
SHA256
9967967608893738401f6a36c7d5e5d9baac4a4cea8115cf93c43ea8da1ec811
-
SHA512
a3107b456039358a88b4c6019a15ca239639290020c043a0eb986f0e489cea4e2fa5fa8d0eaf59a907c898492be35f5ebb780673f924b46340d46c6e9788dfd4
-
SSDEEP
384:ANmZPPfVE0N6C3V47Os+efGfgokNw7e/Finbp:N5PfR3DeBLNjinV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 118000e3d539e226b5f405400660471f_JaffaCakes118
Files
-
118000e3d539e226b5f405400660471f_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE