Static task
static1
Behavioral task
behavioral1
Sample
2289b75b643e2398a7429d927a67825c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2289b75b643e2398a7429d927a67825c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2289b75b643e2398a7429d927a67825c_JaffaCakes118
-
Size
4KB
-
MD5
2289b75b643e2398a7429d927a67825c
-
SHA1
ab97ed7fd852ff2d8606f869adf936ebbb1de369
-
SHA256
3fbab6cb5f81eb1b6bd131125c5eb8a5102f7e01774a6d252761eb82c232980b
-
SHA512
2741c885d81ebfad7de9ff3c1a6fd87591bbea2f152005b436169e8f82e168b5259d43a67d2f64d82c3e4e4cba11d8505029c6039365d952d52898240ad5cdf3
-
SSDEEP
48:qT/qHiQ7kORI0L/T1vRkIJtSDgoEhwOSoEAoRKSbTyR76YRsrabjXFoN4I7X/BM:syH5wx0LbskAZe5EAAKSHyZIr2XCJ7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2289b75b643e2398a7429d927a67825c_JaffaCakes118
Files
-
2289b75b643e2398a7429d927a67825c_JaffaCakes118.exe windows:4 windows x86 arch:x86
81de0e12e2fe89d99f5456b35b4acda8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
wsprintfA
msvcrt
_ftol
modf
sprintf
malloc
free
kernel32
GetProcessHeap
ReadConsoleA
GetStdHandle
WriteConsoleA
GetModuleHandleA
HeapFree
HeapAlloc
ExitProcess
Sections
.pe Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ