Static task
static1
Behavioral task
behavioral1
Sample
399f436c3c68e91873f9d754bc5c2079_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
399f436c3c68e91873f9d754bc5c2079_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
399f436c3c68e91873f9d754bc5c2079_JaffaCakes118
-
Size
20KB
-
MD5
399f436c3c68e91873f9d754bc5c2079
-
SHA1
f7af829e2c2954c9683e73885f8b5ad34b32b7ca
-
SHA256
c43182d010a84dcd8d6ff19d3a9e3d036dc804f4f97f0193a10d8bcc5716b85c
-
SHA512
7c6bb52d7062ad13089ba784ff108fb4b76fefa4a9c97176e1b1b32f19fe0496812cf02c2a94901b74e0f7dae76b17b337fc8079438bfb708ac3bf6817523697
-
SSDEEP
384:i8EpFXF9cjz9aLBlBrsPcARag/7vj0lF2DGT4YEU:ibdF9cjzwLBlFMO9E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 399f436c3c68e91873f9d754bc5c2079_JaffaCakes118
Files
-
399f436c3c68e91873f9d754bc5c2079_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d487fbd48ef4f3c3e3751864c0d5e94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FindWindowA
kernel32
GetProcAddress
GlobalAlloc
LoadLibraryA
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 236B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE