Static task
static1
Behavioral task
behavioral1
Sample
314c90b6b491ac7dad4b060a997e528f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
314c90b6b491ac7dad4b060a997e528f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
314c90b6b491ac7dad4b060a997e528f_JaffaCakes118
-
Size
55KB
-
MD5
314c90b6b491ac7dad4b060a997e528f
-
SHA1
696db5c64ea95067822159f58d88af6b4c0f788b
-
SHA256
71ce23d839072b273a96e8678b0776ed7852faddd932b5d11c5da90a5221d5f3
-
SHA512
d278cf9c566f072d1cde6066fa0e09f2134eb2bcc52ecad080630cbd90fc09d5ad0600ca68f2057b382ac0d79e4cb1b7a4990166aaff923a176cfc462da33568
-
SSDEEP
1536:1CKoLD+h/84UimkdxMjmG6x6MAjo7AIsrrG+eXr:1CKomy45Z9GlDrXsr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 314c90b6b491ac7dad4b060a997e528f_JaffaCakes118
Files
-
314c90b6b491ac7dad4b060a997e528f_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ