Static task
static1
Behavioral task
behavioral1
Sample
db95834ae87fa778dae32eb24192e1d3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db95834ae87fa778dae32eb24192e1d3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db95834ae87fa778dae32eb24192e1d3_JaffaCakes118
-
Size
135KB
-
MD5
db95834ae87fa778dae32eb24192e1d3
-
SHA1
e7c6343de18c82c323cfbee7e0ee44cd4ad2cb99
-
SHA256
1ed5eb1816a5f03824beed149ee7d43e7b462bd901a56854aacd7a358cd9b88a
-
SHA512
d11b3a042b51d749b527184717497a0d1535e9764a8776cfc3c44ae927fc33e61615b12e1fe16928658dedc992f684cd2228d18da03ef50f36bbf594b351c283
-
SSDEEP
3072:XOJFQ04oheBdTpKnjJyuCL/mnINjJuGCjRfZRV87HSgJ9:eJFdRwBdTpKndytL/mnINUnjRfPV8bSk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db95834ae87fa778dae32eb24192e1d3_JaffaCakes118
Files
-
db95834ae87fa778dae32eb24192e1d3_JaffaCakes118.exe windows:4 windows x86 arch:x86
fdbfec85672f73d2a4d49635454936d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
user32
MessageBoxA
Sections
.text Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MCS Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE