Static task
static1
Behavioral task
behavioral1
Sample
436de06b72c3b9ecb5dc68b2274f66aa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
436de06b72c3b9ecb5dc68b2274f66aa_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
436de06b72c3b9ecb5dc68b2274f66aa_JaffaCakes118
-
Size
51KB
-
MD5
436de06b72c3b9ecb5dc68b2274f66aa
-
SHA1
29c8a0b6a3b99c68aa05c63f2e649f145cae3e20
-
SHA256
182bde085e7cb4dd6393f6dc16e004aac88ec92f8a26c7044fda38f9b2386ac5
-
SHA512
391db3e463940dfee6be9430def263e08c78cb4c10dcf400cbbce0bc3ad645ee313ee4ef85ea207b3db90e2fccb2d0140d64afdfd4a081bdf0ac909bd8bb10a4
-
SSDEEP
768:GGkxltFVP74YfBhfwM8ov/UWOtAMSPfLemAA/7GNB1VnXqYM4Bh+Mavt:GGqhVP7Xfnw2XZOKLzAAT+B1dV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 436de06b72c3b9ecb5dc68b2274f66aa_JaffaCakes118
Files
-
436de06b72c3b9ecb5dc68b2274f66aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code1 Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE