Static task
static1
Behavioral task
behavioral1
Sample
317e0ab6967b8f638882aee5ddc5bdf8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
317e0ab6967b8f638882aee5ddc5bdf8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
317e0ab6967b8f638882aee5ddc5bdf8_JaffaCakes118
-
Size
54KB
-
MD5
317e0ab6967b8f638882aee5ddc5bdf8
-
SHA1
dcebb4017c99f28ae99279858c582f680af6d52e
-
SHA256
4483761d98ce1624cfc6cf3c5124827e6c48c98f278e3511031022b3d494adc4
-
SHA512
bfe536e6f66cab6327b5530528e9ce1a37ca7843532e96cf5cd192d74b9b77e9a0bfd7196f24ccce341557d7e8ede22874a0ed41ad86ee015bdf5770181f7446
-
SSDEEP
768:yevFIYG0on60GavZUdQffoaFNnioNQpMGZi4BObYu9J75/scMUj/jdqmUf:z8V60GavhgayZi3JBMUjh2f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 317e0ab6967b8f638882aee5ddc5bdf8_JaffaCakes118
Files
-
317e0ab6967b8f638882aee5ddc5bdf8_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ