Static task
static1
Behavioral task
behavioral1
Sample
1609d80d6346eee1c1e36ab396d724b0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1609d80d6346eee1c1e36ab396d724b0_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
1609d80d6346eee1c1e36ab396d724b0_JaffaCakes118
-
Size
100KB
-
MD5
1609d80d6346eee1c1e36ab396d724b0
-
SHA1
87dfcebe01c8c13da91cd5220f13cbe35a615267
-
SHA256
1ce17d24589a059c983b033fbed6347e1e3d61a0b4cd3bdb416ccfcff2b15ddb
-
SHA512
abaaaf0bd16539e9239e8aaad11a2902c901506ad7bdbc781a21ff88455f3965a2741254e611c006f7e127bb81445d148e97f0c1f14ee9905feacf11387b2911
-
SSDEEP
1536:lt06jJ8nNPSIOSJdWG2cjQWr9+mwCgoFajr+889aMKG5Toz0Ck0YPm:X0aJ8nrOChfjpc/ho8IhXooj0mm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1609d80d6346eee1c1e36ab396d724b0_JaffaCakes118
Files
-
1609d80d6346eee1c1e36ab396d724b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE