Static task
static1
Behavioral task
behavioral1
Sample
199adc0a8b297a43cb39396484f609c3_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
199adc0a8b297a43cb39396484f609c3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
199adc0a8b297a43cb39396484f609c3_JaffaCakes118
-
Size
68KB
-
MD5
199adc0a8b297a43cb39396484f609c3
-
SHA1
c2374c7458698f600c6a2a7232992aea400ec908
-
SHA256
1e01c3ff74e85fe614beb6e437450bfa844f9e1774f3f322ecf3c7fe430ba7a3
-
SHA512
855257da39203db810d0be6ba194cdd736fdeb6f41c95b3bc4e18e96fb57c5257aab005c3f265a0db208a09f9429a81577a918853c2846035ef59854e5d10d68
-
SSDEEP
1536:fO1TAZU23wXQ+8+7Ee9RiXdnispX65snzBMzV:m1cZUihpuRitZusnzBM5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 199adc0a8b297a43cb39396484f609c3_JaffaCakes118
Files
-
199adc0a8b297a43cb39396484f609c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
�rBot.ex Size: - Virtual size: 804KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE