Static task
static1
Behavioral task
behavioral1
Sample
6020f06efaf892352851d8be55130582_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6020f06efaf892352851d8be55130582_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6020f06efaf892352851d8be55130582_JaffaCakes118
-
Size
31KB
-
MD5
6020f06efaf892352851d8be55130582
-
SHA1
3dafaa296e97d0dd3db42e524d3f0a2fc6460283
-
SHA256
7feb22d0514bd4a4e433e006190deb2c03c7d310b09051545bef523524a01160
-
SHA512
5af15ad7bab11780c0a296b84d0fc6129c1109bf834d2fa306456993033d60e2b746c1c820932a35652099daed8f19ffde55f3eed053f83a42b8d95637d6f1f2
-
SSDEEP
768:zIPfXOhlKoLxtCt74y/842kGim5admgS0CX0MC1:4CKoLD+h/84UimkdxMi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6020f06efaf892352851d8be55130582_JaffaCakes118
Files
-
6020f06efaf892352851d8be55130582_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ