Static task
static1
Behavioral task
behavioral1
Sample
18be2b4ff5289916f665f98c03c2983a_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
18be2b4ff5289916f665f98c03c2983a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
18be2b4ff5289916f665f98c03c2983a_JaffaCakes118
-
Size
56KB
-
MD5
18be2b4ff5289916f665f98c03c2983a
-
SHA1
4607bc1a8bfc0f1d6b1a8ede043c50dcff249d4e
-
SHA256
166c6ac7903bd876bc4c7212d175652e77d1dc3ba86d0f99bd363c5aa4199ddd
-
SHA512
0e9f0679f6c06a45659d459d634e887e00bf961df4265ee2cae75ae5a9f44199d62d2eed6ec122f1a0b0691eb167aa3567709e34742c80695825a2582d83f664
-
SSDEEP
1536:7Z/nEkh8OTKNGK69YOX7ckrjegTWXSwx8zTn:9xhTKNkOOLckrjpTBw+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18be2b4ff5289916f665f98c03c2983a_JaffaCakes118
Files
-
18be2b4ff5289916f665f98c03c2983a_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ