Static task
static1
Behavioral task
behavioral1
Sample
53306eb72a69d706e8f24cb34faddc31_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
53306eb72a69d706e8f24cb34faddc31_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
53306eb72a69d706e8f24cb34faddc31_JaffaCakes118
-
Size
104KB
-
MD5
53306eb72a69d706e8f24cb34faddc31
-
SHA1
5f8627b0310f14bb1d1710bcb2eb22ecdd1dcc9e
-
SHA256
ca4ba2860e5d9e7f3d18a88957c5443702ba2f48b6a8eb7f64babc1bf0d0c13c
-
SHA512
2996298fae350977e344af35361a7a3361df71868863cc1907cdccd6ddf251b5c7aec02d498ca16f002900bd6a079b5f9a8c9a57b5322b4baab296696bb31a3f
-
SSDEEP
1536:yBQZOLsqLCEcVDNUs0IkzddqCbTq+tNf/Vk4h5do6rSHcTqyft2V:yBQqknNdUzdd/SAh/Vk4FoDH94t2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53306eb72a69d706e8f24cb34faddc31_JaffaCakes118
Files
-
53306eb72a69d706e8f24cb34faddc31_JaffaCakes118.exe windows:4 windows x86 arch:x86
b9e477e264f184a3a423704750fa51cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
OutputDebugStringA
GetProcAddress
GetModuleHandleA
ExitProcess
VirtualQuery
user32
MessageBoxA
ntdll
_chkstk
memcpy
Sections
.rdata Size: 4KB - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE