Static task
static1
Behavioral task
behavioral1
Sample
399fa9c43e608aef9363779b1df37e31_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
399fa9c43e608aef9363779b1df37e31_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
399fa9c43e608aef9363779b1df37e31_JaffaCakes118
-
Size
47KB
-
MD5
399fa9c43e608aef9363779b1df37e31
-
SHA1
49e9d701e0d636a89ff2ac8aee171bf7fb309f4c
-
SHA256
242f8d5727737353403530c46d8ae6b7039ec159f5fb40075cea89ef5b54ea2f
-
SHA512
04ba4b41adf7cec7f0e9536a027072ed558b2876e63a047390bbf1865609d896607974f02194a7a1b7dc537ade1d059c38bdb665424c3d35474256c0bbb52e58
-
SSDEEP
768:QpABKLcH02mlOqd4h1NQIx53zr26njnImjQPZj+M+eYZK1XqP1eQy:QpAILcH0VUCCbpbI7ZINDP1eQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 399fa9c43e608aef9363779b1df37e31_JaffaCakes118
Files
-
399fa9c43e608aef9363779b1df37e31_JaffaCakes118.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code1 Size: 5KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE