Static task
static1
Behavioral task
behavioral1
Sample
ed49c70ed0ea90b2ba14d6d1642ff659_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed49c70ed0ea90b2ba14d6d1642ff659_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed49c70ed0ea90b2ba14d6d1642ff659_JaffaCakes118
-
Size
54KB
-
MD5
ed49c70ed0ea90b2ba14d6d1642ff659
-
SHA1
c624aef348bde9b6d3a9e79cd32521b90ee38122
-
SHA256
7b99814c07637ec8514cef235cda2d7a739267a270215895ed4b2aec297f02d8
-
SHA512
a4d3736bde3e5acef7ce15512bfc03940194e136bca9e2278575dbb8f5781607184696e176693af2196de74045f99d995c6e830431272f9f6a1bc61b6b6d4f2e
-
SSDEEP
768:pOULTzTBDiSfTeiZ7VWMswEAnGkL7+TLzlfQUkHGsNkpQ1D+1Jo7dby9OAt5kB/i:IyfvEAGM+Tvl8RkJ1JoZyV5kB/YhuaX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed49c70ed0ea90b2ba14d6d1642ff659_JaffaCakes118
Files
-
ed49c70ed0ea90b2ba14d6d1642ff659_JaffaCakes118.exe windows:4 windows x86 arch:x86
482ea7b49481ccb9a2f155f65a5d858f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 92KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ