Static task
static1
Behavioral task
behavioral1
Sample
16165b3122abca1de591dea95b5a003a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16165b3122abca1de591dea95b5a003a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
16165b3122abca1de591dea95b5a003a_JaffaCakes118
-
Size
56KB
-
MD5
16165b3122abca1de591dea95b5a003a
-
SHA1
0e1bce156c850ae3414468c5f3e31e99e8c72edb
-
SHA256
e14c4b2d82298f10293e906ecd17e4ad64dd322b803306385fe46568ec69d22e
-
SHA512
0597655f1c74c21b55310e248fdc31429acbbed3c5c47a1b70f0bf32d423d973dea83247063986b6b19e6939b75499702009c42eb6b8528344689819fc9e02d7
-
SSDEEP
1536:7Z/nEkh8OTKNL9ra69YOX7ckrjegTWXSwx8zTn:9xhTKNLdOOLckrjpTBw+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16165b3122abca1de591dea95b5a003a_JaffaCakes118
Files
-
16165b3122abca1de591dea95b5a003a_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ