Static task
static1
Behavioral task
behavioral1
Sample
249411ddfb5315c65d04a928f7e712a0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
249411ddfb5315c65d04a928f7e712a0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
249411ddfb5315c65d04a928f7e712a0_JaffaCakes118
-
Size
62KB
-
MD5
249411ddfb5315c65d04a928f7e712a0
-
SHA1
4f97bf545c4d8119adeb830e7bad7aa3ecf2b9bd
-
SHA256
31b347b09a07ae7c939d1fee51b3bff96ccde4333c607fc2504d00171ccadf21
-
SHA512
97aaec662984b25a81d409068d8c95495803ee70955e02e754922149efe42a7c1a5f0e38247399d3dcd2da890d084f5034f438e9df673c22d5f972b531e93a88
-
SSDEEP
1536:9GPrLmKW0jh9qvK6L8z2+R/szv+SNz7GmQHmiadVI:9eLmKZIf4zNEzv+SNzKmiiI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 249411ddfb5315c65d04a928f7e712a0_JaffaCakes118
Files
-
249411ddfb5315c65d04a928f7e712a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
d7c3c9382b43e5478a56ea7d42452cdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ