Static task
static1
Behavioral task
behavioral1
Sample
3039c8fd8dabb95394c32dd569769863_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3039c8fd8dabb95394c32dd569769863_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3039c8fd8dabb95394c32dd569769863_JaffaCakes118
-
Size
373KB
-
MD5
3039c8fd8dabb95394c32dd569769863
-
SHA1
6cb4ca82420df17ff45fad94cf863ecf2e74ca10
-
SHA256
793b0ba7561b40d0d728d7658dfcbf5f5bf3b20c4c5e709066ea7327e86cd7e9
-
SHA512
e80f02625ccb3df4c6cc593727383a27d19cc7d52d6799b7a4d1557d2ebade5f1d47e7440bc2a4bfc714f8ff83f5204e21a24fb6f3b48bf9ac7f9711879e2212
-
SSDEEP
6144:hmA3zDbieSeFW3k3Dm6HsxjFlwHfGiHuTqe6TDS0PwFVCax3aOmUKG+9iD+k:h1zDb1rjMdwDSCwKQ3QUKGUiD+k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3039c8fd8dabb95394c32dd569769863_JaffaCakes118
Files
-
3039c8fd8dabb95394c32dd569769863_JaffaCakes118.exe windows:4 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE