Static task
static1
Behavioral task
behavioral1
Sample
239ad42822e6b51f4393f8fe266e989d_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
239ad42822e6b51f4393f8fe266e989d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
239ad42822e6b51f4393f8fe266e989d_JaffaCakes118
-
Size
19KB
-
MD5
239ad42822e6b51f4393f8fe266e989d
-
SHA1
db1bcbcd74867e0119f501e4c0e55765d6fac530
-
SHA256
547e9fcf2b41f8b62debc69e2a951e3182b87ee1243903abb3cf3998970964d4
-
SHA512
5ada12a66316fc0899206f1fb4f920f80f63d95ae9183ff4129e51c0547546f47a1bd9fa064fac90b4ef94db201374033fa8a34833b610d218d9480f0eaf5f52
-
SSDEEP
384:8o0vC8u+ZutyWtgUWiN3idCmBBTRKhD9qu:AC83Zg0UW8idbHTURqu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 239ad42822e6b51f4393f8fe266e989d_JaffaCakes118
Files
-
239ad42822e6b51f4393f8fe266e989d_JaffaCakes118.exe windows:4 windows x86 arch:x86
7524565e85a3f1e48204e3b141ee8f65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
Sleep
ExitProcess
user32
MessageBoxA
Sections
.text Size: 512B - Virtual size: 294B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ