Static task
static1
Behavioral task
behavioral1
Sample
4d7adc59628e7863e2cbed48265df564_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4d7adc59628e7863e2cbed48265df564_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d7adc59628e7863e2cbed48265df564_JaffaCakes118
-
Size
160KB
-
MD5
4d7adc59628e7863e2cbed48265df564
-
SHA1
0ee550b32b0f181d5ee5b7575441bcde8701c361
-
SHA256
00c2f150141b15e6d128520c9fae0706c13c34ed1ee4470e418ab9855af1e129
-
SHA512
b2c7589b17987f887c810fec891e8d7abedd35fad14f23a94f50a48bdbea614a0d57be5e243d95214de97f4183f581c74b1fe6bf536d712bea97a5bbbc47e285
-
SSDEEP
3072:mxhTKNbQcgAGKF8WjtOrPOeDgUh0+nbHKxHzaLaC1u:2lKhkh5WZObOeEd+UHzwaB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d7adc59628e7863e2cbed48265df564_JaffaCakes118
Files
-
4d7adc59628e7863e2cbed48265df564_JaffaCakes118.exe windows:4 windows x86 arch:x86
535aa8774c3361a04f8e670a11e921fb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
HeapAlloc
GetTickCount
GetStartupInfoA
ExitProcess
GetProcessHeap
GetCommandLineA
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ