Static task
static1
Behavioral task
behavioral1
Sample
3e47fa43d6a3bbe88976779b8ae522a2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e47fa43d6a3bbe88976779b8ae522a2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3e47fa43d6a3bbe88976779b8ae522a2_JaffaCakes118
-
Size
20KB
-
MD5
3e47fa43d6a3bbe88976779b8ae522a2
-
SHA1
7a7a015087546e3298499a7d945c0a5a3791e4bd
-
SHA256
85abf69154d4b77e18b151b6b47f732066d58ab5c05226cfb395869f1fa30135
-
SHA512
4498748c5bcb61ff683a96eac6446e5bfa3c36f273202f9a243ea5990849856bdd599373faa0407862ea1007c71f070c0fed10be969742d1d314525b5018372e
-
SSDEEP
384:/MvLoRjjmIqLE9A7XYjCFbgabgkMEWWRoJV8ljBVw68jIO8N:UvLoj1qLE9SYjCFbrpW4oOD8k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e47fa43d6a3bbe88976779b8ae522a2_JaffaCakes118
Files
-
3e47fa43d6a3bbe88976779b8ae522a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code1 Size: 9KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE