Static task
static1
Behavioral task
behavioral1
Sample
53e531f63a6b35e1b5100d1fba0efe34_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
53e531f63a6b35e1b5100d1fba0efe34_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
53e531f63a6b35e1b5100d1fba0efe34_JaffaCakes118
-
Size
949KB
-
MD5
53e531f63a6b35e1b5100d1fba0efe34
-
SHA1
8b3dcc91d04174b7b88f4cabdcdeaa47a3e14439
-
SHA256
e741b5ed4879f4a26b7431bf5afe92b7d41a7ae5ffd95eb5c650be1d4529835e
-
SHA512
65bba692123cf84002a38b276b251652e1bcb8bc73fc51cf6ef5ab2e1a8aabeb8c6385dafca265c3fba73c6eaa21724ba3084d1b4665a143579bd551ee15539f
-
SSDEEP
24576:lpwX0zuSCmtbdhd5tIFQKOPZ86bHC3K3d/hqljf+AKGPamai:rNzuSCKhd4uSNAd/hq9fdyxi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53e531f63a6b35e1b5100d1fba0efe34_JaffaCakes118
Files
-
53e531f63a6b35e1b5100d1fba0efe34_JaffaCakes118.exe windows:4 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 170B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 813KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
misswe Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE