Static task
static1
Behavioral task
behavioral1
Sample
f33cc6455f3816f3333975a766966d1f_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
f33cc6455f3816f3333975a766966d1f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
f33cc6455f3816f3333975a766966d1f_JaffaCakes118
-
Size
43KB
-
MD5
f33cc6455f3816f3333975a766966d1f
-
SHA1
653eff3ad1fd769e7d89701038a9d5a169b24677
-
SHA256
dfd3bc0bd84d36bf5be9542839eb5f666fa7beb741a77c99ab9b789160140189
-
SHA512
4801cec5b2c7a1331b6e08cf3268508d27e83936d29d9cda039deddc02f778cf342120dd975104d9fd63ba7a27b3e1d93fa48e265b4d84629b75814bae561ab7
-
SSDEEP
768:nX4i4nfpHx8jwyRBYr2/hDIi5f3s+PvAK63kerEIpgbMSmgn2eJKPYuOpUYYDMvx:X4i4fpR8cyV/dlTPvAtprjkMBaDMYuty
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f33cc6455f3816f3333975a766966d1f_JaffaCakes118
Files
-
f33cc6455f3816f3333975a766966d1f_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
PREVIEW Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PREVIEW Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PREVIEW Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PREVIEW Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE