Static task
static1
Behavioral task
behavioral1
Sample
125ef0548db0234d6db1e5b75af37fce_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
125ef0548db0234d6db1e5b75af37fce_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
125ef0548db0234d6db1e5b75af37fce_JaffaCakes118
-
Size
32KB
-
MD5
125ef0548db0234d6db1e5b75af37fce
-
SHA1
5589e78c02a9ed0dc58057f2c0c9578fe808d9a7
-
SHA256
c623e16b85a6a3f890f8989e3734ede35296d07d02f705a5e1e4daeafc4e911a
-
SHA512
c3bc109cd54e20f5d5f2c13932f0f6959cf5e45286f2823a8e7e826043aa0c7d326f32c1465f3654c41c644cabdc64f0cf9dfea5ecbd5c6416fcd6cd0ef82afd
-
SSDEEP
384:kGgi6obtipatcSPTzD3L1MshTkXkxbbuHSiNYby4lsIuM5QQMFNBmxANUxZ5ktbI:Kldalbb1MmncSiNm1sJMWFbYxZ5koS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 125ef0548db0234d6db1e5b75af37fce_JaffaCakes118
Files
-
125ef0548db0234d6db1e5b75af37fce_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE