Static task
static1
Behavioral task
behavioral1
Sample
5da4f35f12a8cf7f918fba57cd3322db_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5da4f35f12a8cf7f918fba57cd3322db_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5da4f35f12a8cf7f918fba57cd3322db_JaffaCakes118
-
Size
31KB
-
MD5
5da4f35f12a8cf7f918fba57cd3322db
-
SHA1
50203f45a176a785e0a2fc5196cf5c892adba82d
-
SHA256
d589f479a84c12bbc7ec04c71aaa7bb745796ed0eb671913f4d35ef997002a3a
-
SHA512
ec9c145bdaad2da6d060f2042401597e711aa7aef6258aef8456dba89e3cbe16dffd6d60f0197a0ae3e3cb5f5c54e0b21fb06aec62f113d00798cc6f3e9204e4
-
SSDEEP
768:ZFhoTzTBziifTeiZSVWihwEknh0L7OTLeNfQfZd:z+/nEkh8OTKNEd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5da4f35f12a8cf7f918fba57cd3322db_JaffaCakes118
Files
-
5da4f35f12a8cf7f918fba57cd3322db_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ