Static task
static1
Behavioral task
behavioral1
Sample
35cd310c266f0ef608e1910b78c11532_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
35cd310c266f0ef608e1910b78c11532_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35cd310c266f0ef608e1910b78c11532_JaffaCakes118
-
Size
30KB
-
MD5
35cd310c266f0ef608e1910b78c11532
-
SHA1
c945c09cf8d5277065fbc1ecaac8a55cd698d874
-
SHA256
fa3a2a5dd1ef2a9c988333ebc7dfe9c328ad9c8e4f5261a0f1a3f7f4c62649e6
-
SHA512
19aa3778af9ec40d558a4cf5e024f3fd5ee23b5b73b53f45fbb663f1db8f33ca883fba89e6ab2eec32571c6b65c3ce2725c8fcbbee74139a77f8552a39983705
-
SSDEEP
768:PZRKx1cnWBhkzF5aJ1FHwy+dTVtRHGgnDofHNmas:PZRKxi4kTggn8/Ar
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35cd310c266f0ef608e1910b78c11532_JaffaCakes118
Files
-
35cd310c266f0ef608e1910b78c11532_JaffaCakes118.exe windows:4 windows x86 arch:x86
f84ff1fec7866e50d95c62e55aa5da77
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
Sleep
ConnectNamedPipe
user32
SetTimer
GetFocus
CharNextA
PostQuitMessage
gdi32
Escape
Sections
.text Size: 1024B - Virtual size: 950B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ