Static task
static1
Behavioral task
behavioral1
Sample
33fa898e82d05093f58a0c21c5ab457d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
33fa898e82d05093f58a0c21c5ab457d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33fa898e82d05093f58a0c21c5ab457d_JaffaCakes118
-
Size
55KB
-
MD5
33fa898e82d05093f58a0c21c5ab457d
-
SHA1
099598dacbbb9cbd3bddaae188dbf27ae99ba9f0
-
SHA256
095a04388ec13a01f1d3eb645added87370a91de14e9e71e94fd89f9777d534c
-
SHA512
c139088f1d9b01fe46764020edb5296352f43a9fbd3ff4daaf823177a711141a243d8964a8346e8ae4cb830e00529adb974b92f7c5fb5b6fde992b57aa2a9028
-
SSDEEP
768:levFI4m0on6HGavZUdQffoaFNnioNQpMGrhRY8vDckrR0gz9KjqjOYxwA3eyLt4W:w8V6HGavhga4bY4cklCOj3SYLt4pSXx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33fa898e82d05093f58a0c21c5ab457d_JaffaCakes118
Files
-
33fa898e82d05093f58a0c21c5ab457d_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ