Static task
static1
Behavioral task
behavioral1
Sample
3d4ddaf9e181ccdb99b073c24d562a08_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3d4ddaf9e181ccdb99b073c24d562a08_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d4ddaf9e181ccdb99b073c24d562a08_JaffaCakes118
-
Size
35KB
-
MD5
3d4ddaf9e181ccdb99b073c24d562a08
-
SHA1
fd1baf5f247ab453cce365b0283cdf985899d575
-
SHA256
8c3565eaae49687b79abab9ef680d2363e7d3959c63606acccd70c3c70ac0cbc
-
SHA512
db0e2a575b4887b6c31f5347b193c4be73f6db61a42b1185048af5d030fd567ff4924f27010cb28ec9ce130b89d5f83158197165496422e3aa72fbb4857fd294
-
SSDEEP
768:UVTS4BTv9dLnBcklA/ltyK02vcyi7aIR3wRAyklt+2k0TB:UVTnBr99nBc0AJ02vcnVwyykK2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d4ddaf9e181ccdb99b073c24d562a08_JaffaCakes118
Files
-
3d4ddaf9e181ccdb99b073c24d562a08_JaffaCakes118.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code1 Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE