Static task
static1
Behavioral task
behavioral1
Sample
160b11f585f422cf940d435f230a8d47_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
160b11f585f422cf940d435f230a8d47_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
160b11f585f422cf940d435f230a8d47_JaffaCakes118
-
Size
20KB
-
MD5
160b11f585f422cf940d435f230a8d47
-
SHA1
91de630cc8d8d7a6e9fc5d662c7d69b4037c2203
-
SHA256
0a13255b54516e413807ebad6eb32d358e3855e73dc87026d93609c5264d3dae
-
SHA512
028ad018155989be3a8c9a427e6bfc56268bc24a617fca2d97a07bc13a3f4eb44a4b6f3b546398ea5a4705060b595315b8fa8b968bb142f922f57b78583fad1e
-
SSDEEP
384:6cDXQC9zC+eb3CLp3yr4PctTQXfmgnmJEfqx2yROIscXKjZmKwj2/iQ:6Dl+c3mpir4Pc2XOXGxABXSm3Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 160b11f585f422cf940d435f230a8d47_JaffaCakes118
Files
-
160b11f585f422cf940d435f230a8d47_JaffaCakes118.exe windows:4 windows x86 arch:x86
b8dd9610f7f3c4e817e66f3501bf26f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
� Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�> Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE