Static task
static1
Behavioral task
behavioral1
Sample
36960028f77b08830cadc98909b3c0e9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
36960028f77b08830cadc98909b3c0e9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36960028f77b08830cadc98909b3c0e9_JaffaCakes118
-
Size
63KB
-
MD5
36960028f77b08830cadc98909b3c0e9
-
SHA1
fe84702c35b814b0f04589a2f053b80c028b3154
-
SHA256
26675ef2bf2f6a8f4c8b89843512dda2ee17a18dd46c814c1fadb56eb25ef18a
-
SHA512
b756d0ef22ac8200877223a9f7c92de609b642fb12cb3acdab9ebbfec71de8d5c0d70de000c982af27680798cb8cd316e5edf3eb0f2b79af0bcc4580f8aadfb6
-
SSDEEP
1536:FUfiw+85C2be+NoYUFrigvNZ2p+pLdajKLWG:W6w+UCejNoYUFrHvNvdajED
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36960028f77b08830cadc98909b3c0e9_JaffaCakes118
Files
-
36960028f77b08830cadc98909b3c0e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
d7c3c9382b43e5478a56ea7d42452cdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ