Static task
static1
Behavioral task
behavioral1
Sample
4a9325e56bd95befb57009ec1b41957b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a9325e56bd95befb57009ec1b41957b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a9325e56bd95befb57009ec1b41957b_JaffaCakes118
-
Size
56KB
-
MD5
4a9325e56bd95befb57009ec1b41957b
-
SHA1
94fb724c1850766887307699693787bfde493691
-
SHA256
4f9ecbf285262e7e8adbb4c5194620acfd266c55742b04c43d4a2dff7d0ab87f
-
SHA512
ca68eda9e6edb56c00bcfb285bc185a85e4ec9eef70f5331f754e52c3c111955972338ff47eca1eed56debfc96fca359bfeb223948e6d67e4212404ad39fa802
-
SSDEEP
768:Zlh7TzTBziifTeiZSVWihwEknh0L7OTLeNfQf+b6wNRSuZTDBCL2jnNY3Kjr7hlT:7Z/nEkh8OTKN9RSCBCL2zScr3S6Bu7On
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a9325e56bd95befb57009ec1b41957b_JaffaCakes118
Files
-
4a9325e56bd95befb57009ec1b41957b_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ