Static task
static1
Behavioral task
behavioral1
Sample
4a3fb48161a57fe56a6dd806a79e4332_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a3fb48161a57fe56a6dd806a79e4332_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a3fb48161a57fe56a6dd806a79e4332_JaffaCakes118
-
Size
12KB
-
MD5
4a3fb48161a57fe56a6dd806a79e4332
-
SHA1
03977dbc6af7963495ae103b01a5bb5d0503577d
-
SHA256
17bfb57adb01cb8dc2ca93f15b2e95b9c23947868d50e7d73239f344496a1ac8
-
SHA512
4f3b5b4969e12a0938f26cd30f6536e7e56516666f0785f7f8c0a40f677564df8b337d4204fe93129f20126d49ff5cf845da18174b26b127812b83b15b24ad48
-
SSDEEP
192:wselFBlDJHJ53bsUbA2dJFPSZOboBxcV07rLC3v:4PDJHJ53IHgPSZOsBuVq23v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a3fb48161a57fe56a6dd806a79e4332_JaffaCakes118
Files
-
4a3fb48161a57fe56a6dd806a79e4332_JaffaCakes118.exe windows:4 windows x86 arch:x86
b485ef9055202bf34dd54535b1622b2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetCommandLineA
ExitProcess
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE