Static task
static1
Behavioral task
behavioral1
Sample
5f1e3d4d176fcb979812e8c2f1f2efe8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5f1e3d4d176fcb979812e8c2f1f2efe8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f1e3d4d176fcb979812e8c2f1f2efe8_JaffaCakes118
-
Size
56KB
-
MD5
5f1e3d4d176fcb979812e8c2f1f2efe8
-
SHA1
fb970c992a91f8923e823c3d1e64c3d3bea6b057
-
SHA256
e13053a6a5f898d4d482383a613dc35a996354e22e260ada785e64b8e86c9cfd
-
SHA512
a7e5fa107bfc4e8b2f504e0a21f58940bf353ede288c521548eed7c12d2167dc4ea179bdaebe0f918bd439b007e8c19fb3645dc329d2293a829730d6c5a83b87
-
SSDEEP
768:Zlh7TzTBziifTeiZSVWihwEknh0L7OTLeNfQf7cdqyH8/+D1EdHsMxBsNJMzs7Xe:7Z/nEkh8OTKNw+mTsqbmmn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f1e3d4d176fcb979812e8c2f1f2efe8_JaffaCakes118
Files
-
5f1e3d4d176fcb979812e8c2f1f2efe8_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ