Static task
static1
Behavioral task
behavioral1
Sample
db984d28d961b169ded2cddf523ab285_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db984d28d961b169ded2cddf523ab285_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db984d28d961b169ded2cddf523ab285_JaffaCakes118
-
Size
191KB
-
MD5
db984d28d961b169ded2cddf523ab285
-
SHA1
87224a58126265b9f6fb534137444d3b2b825da7
-
SHA256
4e12cb280b7c5aa499da6964c3609600c7308d0a24a56a6cb85baaa3672434d1
-
SHA512
f38e154cb7afb636162f54b576e7c5f955504d0a400c62c21d34c665db678d574793f5b2b344027129dd79c85973a436950f742dbb139ee16dd66d442f37f79e
-
SSDEEP
3072:Ul6/T4ipfImppTv125LJwJqTpTHzEY6mNKlBLNUfIpANEUHf+sFikdJdcea16rNQ:Ul6L4iWmrdSTBHzCr5UJSUmsF1JR/NRe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db984d28d961b169ded2cddf523ab285_JaffaCakes118
Files
-
db984d28d961b169ded2cddf523ab285_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 504KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE