Static task
static1
Behavioral task
behavioral1
Sample
210f47ce2f1c7d72a02a5c8cb5d3341e_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
210f47ce2f1c7d72a02a5c8cb5d3341e_JaffaCakes118
-
Size
103KB
-
MD5
210f47ce2f1c7d72a02a5c8cb5d3341e
-
SHA1
8a3ee4417569bf38afb73bda4f528a8c36bf8d21
-
SHA256
1c0294c0b492b425f4178d8b1c7cf5191244f6c7f47943437bbb5369fa3c76d1
-
SHA512
a04a069886d4b49321abf5828a0ddbb0d407b3f72f0e83b81c6b3d0f4be07d1ce43fad1174af121674e808fd825fd57ebb4aa88c52a5e21191a5a103ca4b8798
-
SSDEEP
3072:6gKomy45ZJ+vA8ch7J/ZxLjfMlnj/abEeN:/4rHnTUlj/GEeN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 210f47ce2f1c7d72a02a5c8cb5d3341e_JaffaCakes118
Files
-
210f47ce2f1c7d72a02a5c8cb5d3341e_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE