Static task
static1
Behavioral task
behavioral1
Sample
3198bb001e3f94060ed85bef99bab837_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3198bb001e3f94060ed85bef99bab837_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3198bb001e3f94060ed85bef99bab837_JaffaCakes118
-
Size
39KB
-
MD5
3198bb001e3f94060ed85bef99bab837
-
SHA1
ad9070b5f8dc67ef2cb56b861a5ee3c9c115b23e
-
SHA256
85c12046d5e244efe0588a88953b469964073bfc585835b8cc1dc5957f5b64fd
-
SHA512
2440581adde84283dec87f4917214a745faba00f368c5733b2e0dbfb0f3d869478f9bfd1774c6e5371951519ae68a6a7b68e9cfe723115a2fea255b6d601a658
-
SSDEEP
768:gboKviVR4Frhm8jh9E9e0hQYi4JanQ1nf7yLaH1mW2Gr1RwNNxHZH:gkb42Mh9oe0KYir8yq35RwlZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3198bb001e3f94060ed85bef99bab837_JaffaCakes118
Files
-
3198bb001e3f94060ed85bef99bab837_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
Size: 13KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE