Static task
static1
Behavioral task
behavioral1
Sample
433124de5cb19993a2460b5705e65def_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
433124de5cb19993a2460b5705e65def_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
433124de5cb19993a2460b5705e65def_JaffaCakes118
-
Size
19KB
-
MD5
433124de5cb19993a2460b5705e65def
-
SHA1
0779df28a8b5f0f79d290023ada060417d7a123b
-
SHA256
8b360fceed8e21288a4ebf76e68e2227c9ebb596ea836069c1f4db6feaaab479
-
SHA512
9dfd64d342cf6fc536a243e2051503ecfd70912d25e63501fd6a797dc866c5e517c31d9b78db638868c434ad1fa66410e5cae178fa9c3ada7b856fc9abd9b035
-
SSDEEP
384:feSmziDyhyXeSNeM3Bv+F5mUmcy9bp0tz80cNSijkGU6ZNJpwxYM5:fAydeMRvSNy96rybZX65
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 433124de5cb19993a2460b5705e65def_JaffaCakes118
Files
-
433124de5cb19993a2460b5705e65def_JaffaCakes118.exe windows:4 windows x86 arch:x86
123baf1bb8fe402df13739591f0fae05
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
Sections
.text Size: 18KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE