Static task
static1
Behavioral task
behavioral1
Sample
2879ec3871a63efaf0892a799649f11b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2879ec3871a63efaf0892a799649f11b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2879ec3871a63efaf0892a799649f11b_JaffaCakes118
-
Size
367KB
-
MD5
2879ec3871a63efaf0892a799649f11b
-
SHA1
ff74da96700f168b467c2a9dc66163d2468b5c41
-
SHA256
9bafdacb30547a8ea504f044a32ffa4f723d6bbc670f1ea34b55031e6274a945
-
SHA512
d0aed769cd12966fec671d8f98f6f810447de75538c937e795d0b264b35e0fd73ba47768e4aa068c51f59b1a48c6e72f176f5c80edb69e1f53eb89eb6103de65
-
SSDEEP
6144:/PzRF/Sb5YbWAD3cgtgmenbOKYDvuoCPKH7RznW7HT6XDEauW7gXf:DRF6b5La8mlRUKdWD+XDzuW7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2879ec3871a63efaf0892a799649f11b_JaffaCakes118
Files
-
2879ec3871a63efaf0892a799649f11b_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 231KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE