Static task
static1
Behavioral task
behavioral1
Sample
3835eff03d608ca975bc8d1657e20d6f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3835eff03d608ca975bc8d1657e20d6f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3835eff03d608ca975bc8d1657e20d6f_JaffaCakes118
-
Size
590KB
-
MD5
3835eff03d608ca975bc8d1657e20d6f
-
SHA1
c95745f9e785ee28580829d8a47967e79b47b32e
-
SHA256
bad43d654fc30092bd9e6c47588e7c38cbddca4ca50ec3024b20a7fe7365b5a1
-
SHA512
be099b2933054c5dc9debdbb56da29d640524e5e180f8080603027e491eacbc8d3da18a4e981fec406b3624768508dc99cbd484a39bf2f937e40031fc71a02b6
-
SSDEEP
12288:sBhhQv3uRDAoOs6AgeGwjsHDzEWF7dY/GYhqoTttToVbp6mg+JDFiNP:oju3u5Aob8eGwjsHDzEWFxeAotToVbIn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3835eff03d608ca975bc8d1657e20d6f_JaffaCakes118
Files
-
3835eff03d608ca975bc8d1657e20d6f_JaffaCakes118.exe windows:4 windows x86 arch:x86
52bcca0293a2e7268dc0bc2b29d8148f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
comctl32
InitCommonControls
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 127KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE