Static task
static1
Behavioral task
behavioral1
Sample
64e439edc9b4d82ccc57718083929377_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64e439edc9b4d82ccc57718083929377_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64e439edc9b4d82ccc57718083929377_JaffaCakes118
-
Size
47KB
-
MD5
64e439edc9b4d82ccc57718083929377
-
SHA1
630d0bd11373708f5bc14129da2840ba1cdc4c71
-
SHA256
42633dcb7e6518dc92fca3d1c926ce9f30079ea8bc087c888c264dafdecb9d24
-
SHA512
10fccc33e7b0d0ac6297a976244aaee20264a8b1d3601ad09a036d227a358727bd125fc9bdf97304f058bfc4627ed42ac1a1485ecfa2297425ef3c4c93c39fa4
-
SSDEEP
768:fAOOQ81QeAa8gLOjij1lB5EXH9cvPIGcX4XjonZhH0kppGz9tw0Ij:3OQ8D6Pux3GXH9cvPwIXk1pk9twN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64e439edc9b4d82ccc57718083929377_JaffaCakes118
Files
-
64e439edc9b4d82ccc57718083929377_JaffaCakes118.exe windows:4 windows x86 arch:x86
798e6a01117e44e72f0244cf9d42c84a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteAtom
GetCommandLineA
CreateProcessA
DeleteFileW
GetCPInfo
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 127KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ