Static task
static1
Behavioral task
behavioral1
Sample
3dfb3c22f0f20869ce6bb81dde1ea130_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3dfb3c22f0f20869ce6bb81dde1ea130_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3dfb3c22f0f20869ce6bb81dde1ea130_JaffaCakes118
-
Size
1KB
-
MD5
3dfb3c22f0f20869ce6bb81dde1ea130
-
SHA1
9b0255de28a0b2dfe4d515df12e4ddcdbb15f884
-
SHA256
5a3bfd565ae66e7458540d793e74c8995a8139527edb9752184b4590a1e09359
-
SHA512
365039d92fd8986c40bed4b6aa4a4d0dc75ce79c1694f52121f35b19d16c8581bfd6ac2ee9212f65bc1613a174ab90e5d56861cfcc121afdee108b6e9e08a098
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dfb3c22f0f20869ce6bb81dde1ea130_JaffaCakes118
Files
-
3dfb3c22f0f20869ce6bb81dde1ea130_JaffaCakes118.exe windows:1 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
.text Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 398B - Virtual size: 398B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE