Static task
static1
Behavioral task
behavioral1
Sample
3470f1a7dd240e911cfc78bfcb4aa90e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3470f1a7dd240e911cfc78bfcb4aa90e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3470f1a7dd240e911cfc78bfcb4aa90e_JaffaCakes118
-
Size
31KB
-
MD5
3470f1a7dd240e911cfc78bfcb4aa90e
-
SHA1
b9e1d563153c909dec706ac70157aa1dbbeea05d
-
SHA256
1c248717be0e0f16e25cd43250bb76c1a0cdf9590eb012891a29a766a11dd97a
-
SHA512
56695f0f522aef0d3af1ad9a234214fa54f3fd26defed144aa975d0088972ad25af0d82c56ee5c6ea6746084f1f45e37e947d16c880d24855f397bcc965e1727
-
SSDEEP
768:Pkh7TzTBTiifTeiZJVWiTwEHnh0L7xTLuNfQf03:sZf0EHh8xTaNV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3470f1a7dd240e911cfc78bfcb4aa90e_JaffaCakes118
Files
-
3470f1a7dd240e911cfc78bfcb4aa90e_JaffaCakes118.exe windows:4 windows x86 arch:x86
482ea7b49481ccb9a2f155f65a5d858f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ