Static task
static1
Behavioral task
behavioral1
Sample
0dd944c92c70ec5874a546248e90d2e1_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0dd944c92c70ec5874a546248e90d2e1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0dd944c92c70ec5874a546248e90d2e1_JaffaCakes118
-
Size
82KB
-
MD5
0dd944c92c70ec5874a546248e90d2e1
-
SHA1
d4e31508146bb751307fa44b4c6dc5dad8d61a02
-
SHA256
fb1d4de4cbbbefd4dc736c5cbb54d6e6db84cdc97f5589961da17d5770602106
-
SHA512
299f1ebf380945f8896bf614faf340410bcf0a04a158e2ff7d27c69f8058b4893d7899bf743652bfb7c98a44855af239515cd9a2f053de5538ac0245bbbd8f84
-
SSDEEP
1536:2tV6HGavzgaVfRK9zm30dnvfM2aQ7/JGoWMK5ZqpxPa9A:2tVqnvHfcCkRdOMTDau
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dd944c92c70ec5874a546248e90d2e1_JaffaCakes118
Files
-
0dd944c92c70ec5874a546248e90d2e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ