Static task
static1
Behavioral task
behavioral1
Sample
031dfc184b9f6be81a7a05767633d319_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
031dfc184b9f6be81a7a05767633d319_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
031dfc184b9f6be81a7a05767633d319_JaffaCakes118
-
Size
194KB
-
MD5
031dfc184b9f6be81a7a05767633d319
-
SHA1
dbac7c5865dcdbc9e738c1a90cc7457d4a603d76
-
SHA256
6dae21c15aafffdc7a2eed61189a36d371aa445b78c70350c7290b34c1d084a1
-
SHA512
a22f158ca9599a0c63cc1f62418f5fe9b0b3e5d7d4a5d24ffa521a3dc3181679f805ea4cf71ef9b5b626ccecc50aed26eabf0dbccf103a2b61d8b4151c2c226c
-
SSDEEP
6144:+8Wkyk/skpMTPAnkYhYPobFnoZ6GEbtRKnTr:+DkysMckYhYPo2BiR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 031dfc184b9f6be81a7a05767633d319_JaffaCakes118
Files
-
031dfc184b9f6be81a7a05767633d319_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 820KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE