Static task
static1
Behavioral task
behavioral1
Sample
da3997f9be7400dd38aba149a9116d99_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
da3997f9be7400dd38aba149a9116d99_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
da3997f9be7400dd38aba149a9116d99_JaffaCakes118
-
Size
50KB
-
MD5
da3997f9be7400dd38aba149a9116d99
-
SHA1
760be749f819800f8f7a43cb91dcad08c1fd0d08
-
SHA256
752318d268236cfd0adbf45c9db2f6e277c1aa84ffc7e04648311006564f7a84
-
SHA512
ffb74f36e9ec4eed7df92029afbb3b41a0707d3e912f0ec8f6733d4b3aebe0601e46ebd00db0b1fe33842f3bc282e2e8f2b68785656791ef0eda52b3d448a433
-
SSDEEP
768:ylhb+waDnOdRzHdV0j2S8Jr6d7UepzxmUu9sMijavRpkfoLyYdv91VJ5mJ6+:2hb+waDOdRhr+NHzwUcWjasfCyYl5T+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da3997f9be7400dd38aba149a9116d99_JaffaCakes118
Files
-
da3997f9be7400dd38aba149a9116d99_JaffaCakes118.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code1 Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE