Static task
static1
Behavioral task
behavioral1
Sample
08a18cce1c89ebe8db4b3b1cce04861e_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
08a18cce1c89ebe8db4b3b1cce04861e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
08a18cce1c89ebe8db4b3b1cce04861e_JaffaCakes118
-
Size
31KB
-
MD5
08a18cce1c89ebe8db4b3b1cce04861e
-
SHA1
829f99e6c279dc83d6d0e2d6608f068cff3b1b05
-
SHA256
e2baa4f3e7848ba8b442496c05b816e447659a8ae18b88b4466492ffbcf8d883
-
SHA512
cd2543f1d7be3e1265f3ee41ec4ca766b60153ecf2b9f52a9de8b0d4212633dbe674575f723fe025925532a9fe8c97695ae48765038e301d0ecaf4a8f9a51212
-
SSDEEP
768:Z+27TzTBziifTeiZSVWihwEknh0L7OTLeMfQf03:k4/nEkh8OTKMt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08a18cce1c89ebe8db4b3b1cce04861e_JaffaCakes118
Files
-
08a18cce1c89ebe8db4b3b1cce04861e_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ