Static task
static1
Behavioral task
behavioral1
Sample
11ba0844431f7276bca7fbd0a6f14e73_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11ba0844431f7276bca7fbd0a6f14e73_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
11ba0844431f7276bca7fbd0a6f14e73_JaffaCakes118
-
Size
100KB
-
MD5
11ba0844431f7276bca7fbd0a6f14e73
-
SHA1
61ab157dd6d6bdbbac1cc24ee466247ed8f744cc
-
SHA256
8d8771129e8a066a7e54044433ae5c534fd4c9826592f4d6d972e2e92390afdc
-
SHA512
3cfb906d212c670b69af03864eea06489ddeec9dcf65fd5364947a2d5866e12cb1accb52fef9500c49121ca8c190edb379b4c7cf15d0b713065fdcf06c0d8186
-
SSDEEP
12:wGB+CAo0/1J4bORIBvuJ5y6ZXT/jSPfK67WDMthtsh4:wGB+CAjJkBvu7NN7SPJSsh5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11ba0844431f7276bca7fbd0a6f14e73_JaffaCakes118
Files
-
11ba0844431f7276bca7fbd0a6f14e73_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 100KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE