Static task
static1
Behavioral task
behavioral1
Sample
df99d601836e60465610d4e5deea9942_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
df99d601836e60465610d4e5deea9942_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df99d601836e60465610d4e5deea9942_JaffaCakes118
-
Size
74KB
-
MD5
df99d601836e60465610d4e5deea9942
-
SHA1
712b548b417ef1bed1dfaffb5819849495f00274
-
SHA256
022e5e3eed0f7c820a6afe2a0fb87f68a3388dab5c51060e8274a5825e8f1024
-
SHA512
9beb80a0631255db441b04063791e48f71c5a0b6d1fc969fcf6e2044641d49a922c5e514285f492f1c9451bc8dde8c2261f126ac1b1d4ead6c99c9e7de544c78
-
SSDEEP
1536:ro5nSSxQUrr+NrPk4LnvDrRZNeYRwr30Fpb+4D5K3TPVXM:r8nxQu+NDRJZNHCcpS4gC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df99d601836e60465610d4e5deea9942_JaffaCakes118
Files
-
df99d601836e60465610d4e5deea9942_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa1ca832e28e2c6a63685365c58b52b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadModule
user32
MessageBoxA
Sections
.text Size: - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE