Static task
static1
Behavioral task
behavioral1
Sample
d3b5c81f5003a05721c00e11fb7b1907_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d3b5c81f5003a05721c00e11fb7b1907_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3b5c81f5003a05721c00e11fb7b1907_JaffaCakes118
-
Size
51KB
-
MD5
d3b5c81f5003a05721c00e11fb7b1907
-
SHA1
dfefee98734050c803a7bc9ac5f2811a422322b8
-
SHA256
d0b886bdbf01c8f6b6faca367b5f33e217a871e3f4d6f2efd78499ac659f3ae6
-
SHA512
61de1295a66cf7c1fdf1b039b2be8cd033b158746c23365e31487054e96548b55f60e6f4e525b61eca02cf17c190e78f87ca88be43d0302a6278add30bf7dd55
-
SSDEEP
768:yO7RLyaGDq9++nrqxkkQXX6uiEPIGrTAOATqnI6hnASpO2sGB5UEREz5aQuvi:yOyaGDqnkkkAi8XUunIenASkDGrK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3b5c81f5003a05721c00e11fb7b1907_JaffaCakes118
Files
-
d3b5c81f5003a05721c00e11fb7b1907_JaffaCakes118.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code1 Size: 9KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE