Static task
static1
Behavioral task
behavioral1
Sample
5bcbaf7d5bc2a1eb893247539beead70_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5bcbaf7d5bc2a1eb893247539beead70_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5bcbaf7d5bc2a1eb893247539beead70_JaffaCakes118
-
Size
31KB
-
MD5
5bcbaf7d5bc2a1eb893247539beead70
-
SHA1
33a97d3e3e8d5242f3ff8e16a183f7d0655be3ac
-
SHA256
69b963b029c1707e83f8a3d562748877993d3fc2dd883efc91942a841bac10ec
-
SHA512
b0a526f31fcf92efb9aaac2949d00fc61c75c0e492a43b43c96c96accbf6dae63443344477b195bd29f027c829cf3f034fff1037de8a8f55e67fad35cfea4428
-
SSDEEP
768:WNPfXOhlKoLxtCt74y/842kGim5admgS0CX0MJ:qCKoLD+h/84UimkdxMJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bcbaf7d5bc2a1eb893247539beead70_JaffaCakes118
Files
-
5bcbaf7d5bc2a1eb893247539beead70_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ