Static task
static1
Behavioral task
behavioral1
Sample
2ef5b47f973f52ee85e47895487d4c94_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2ef5b47f973f52ee85e47895487d4c94_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2ef5b47f973f52ee85e47895487d4c94_JaffaCakes118
-
Size
7KB
-
MD5
2ef5b47f973f52ee85e47895487d4c94
-
SHA1
599ae8b8fdeba86a2d48555ee9acac3cb61798a5
-
SHA256
ddeeb0de4f4d66b733314cce8466e440b940b4edc593f14858ee4bc0a2d050f9
-
SHA512
345bbcf2af9adca9e8b8e0c028c970b385196b31ccc4dd337eb5aa95d2923903a2371e1219e1db0bc0321d918896d98786f825acac236b6a7c7dddc2298c1948
-
SSDEEP
48:6tEB/Cq2DXv1FIFENWIs1Yvuwz346I99UH8x1qe41PWz2v0gEYHGQ9zIGsjZsICX:KB71FekI6Itx1qvxt0Km6XsjhC6qSQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ef5b47f973f52ee85e47895487d4c94_JaffaCakes118
Files
-
2ef5b47f973f52ee85e47895487d4c94_JaffaCakes118.exe windows:4 windows x86 arch:x86
20030abaad63a19df219c0db9ca1fe73
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowOwnedPopups
MessageBoxA
BringWindowToTop
kernel32
ExitProcess
SleepEx
Sleep
QueueUserAPC
CreateThread
GetLastError
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 306B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ