Static task
static1
Behavioral task
behavioral1
Sample
47f8b8e6d53914309bb4b69b9202e46f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
47f8b8e6d53914309bb4b69b9202e46f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47f8b8e6d53914309bb4b69b9202e46f_JaffaCakes118
-
Size
31KB
-
MD5
47f8b8e6d53914309bb4b69b9202e46f
-
SHA1
9ff05c9a91986a9fe2897715dc60435637ece17e
-
SHA256
ec23ff5dd24ea248b4753e28ba8ccb6556c8e9e43cc356c8155eaaa2a05f59ba
-
SHA512
d856cb3f1bda19f7f237eb1c029538f86542b3d83ea7640fb091aa807b7e1019ecd8b5f2c26c96f8a5826c0dcff3130a43ca4cc7c7397ad3986fbcbbbf638a5f
-
SSDEEP
24:e1GS5/+gVESq4Hs/q1KNoJL0WMLHs3H2ojB9KdZXpoEwAugLBChCelI415xPsXjO:S5SJDU0hLMmoO/XLBCI6t1s9Y7QtJV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47f8b8e6d53914309bb4b69b9202e46f_JaffaCakes118
Files
-
47f8b8e6d53914309bb4b69b9202e46f_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ