Static task
static1
Behavioral task
behavioral1
Sample
faa98a6c834a4efb84f178b4bf42e6a1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
faa98a6c834a4efb84f178b4bf42e6a1_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
faa98a6c834a4efb84f178b4bf42e6a1_JaffaCakes118
-
Size
45KB
-
MD5
faa98a6c834a4efb84f178b4bf42e6a1
-
SHA1
ad67785079a0018d06ed007e793a78c6eb91022e
-
SHA256
88242e3a2a91c430354de5511529cbfd3e939461a177a7ce18619e4c9ae3e43e
-
SHA512
4da39f78e0549bdc4867e8e36d257aa457b9999598321f50156351ec11ad415b5eef5e8af2c7303c1e822a3a3de1da279792bab16717b551ab2682630c56c0d1
-
SSDEEP
768:Pxl7DDTBeid/TeiZRVWRBwkXno0L7UTLuSnqUe:5ltXkXo8UTaSe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource faa98a6c834a4efb84f178b4bf42e6a1_JaffaCakes118
Files
-
faa98a6c834a4efb84f178b4bf42e6a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
482ea7b49481ccb9a2f155f65a5d858f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.TEXT Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ