Static task
static1
Behavioral task
behavioral1
Sample
2954f66c1f1880e8b5d3a0a6e8f5fde1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2954f66c1f1880e8b5d3a0a6e8f5fde1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2954f66c1f1880e8b5d3a0a6e8f5fde1_JaffaCakes118
-
Size
5KB
-
MD5
2954f66c1f1880e8b5d3a0a6e8f5fde1
-
SHA1
958c7a637d25ec46f1ca62214e41332b9e7d34ca
-
SHA256
ada71beb21e1917066f4df70e519dfc26b9be965eace20d9f3eecda4bb6e3c53
-
SHA512
fd971462c4488d21deb67da4552dd0d32f236c9f628aa3520a036da564fa9df8f30fff88697fc4c7d5eefd62628e2d9d961f1303ccc88a3b0975d26cf8e1604c
-
SSDEEP
96:QpmYAMskPvpOcTa5omNxsuaJGWsXeAb+l762LVUXIfiZaQ7fzaW8RyD:Qpm7MbPRlmNlgYBb4LSIqZZaWiyD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2954f66c1f1880e8b5d3a0a6e8f5fde1_JaffaCakes118
Files
-
2954f66c1f1880e8b5d3a0a6e8f5fde1_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 4KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE