Static task
static1
Behavioral task
behavioral1
Sample
f040ba76c9e80374f692a2a0a84193b8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f040ba76c9e80374f692a2a0a84193b8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f040ba76c9e80374f692a2a0a84193b8_JaffaCakes118
-
Size
50KB
-
MD5
f040ba76c9e80374f692a2a0a84193b8
-
SHA1
d55d4cb7b1eb3ae278fcd856886799b9be2f82fd
-
SHA256
20801fcf78a6653041e2b61a345d0dcb126a8eff013e5d684e96c4dfcad92dd1
-
SHA512
7532f703cddb8947a99cfc52d8de4cb10e60ee5f2881ea416ca87a202d4388f98f6741f1e30b1763e72328ba69be0d06b2945b29d3b64b54236938ec1ef894ea
-
SSDEEP
768:dcu6T1Nswj+TgtSm5zuvXGUC1f/wpvOjeFz2D5FkS/DZn7NX6fkiYtR2XLWC:h6AgfzuvWapWjy2jkS/DZ7B8XK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f040ba76c9e80374f692a2a0a84193b8_JaffaCakes118
Files
-
f040ba76c9e80374f692a2a0a84193b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code1 Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE