Static task
static1
Behavioral task
behavioral1
Sample
65421e83efa79d61bbfa0cec91c1cdb2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
65421e83efa79d61bbfa0cec91c1cdb2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65421e83efa79d61bbfa0cec91c1cdb2_JaffaCakes118
-
Size
31KB
-
MD5
65421e83efa79d61bbfa0cec91c1cdb2
-
SHA1
0af8ae2750af669cf9bed508507bf61ad84fcb23
-
SHA256
5cffd1259752d107e6f0c708ad96c8889db680499851aa231bc005f9d4954a39
-
SHA512
c2400027fd1019fce7fa27b24e5d76f0bdd4d7631503b989b22fc117e86f346b4c1fd6bd1b92ccdd48d1185ca3dc72e4f72291ad33fac3350d4a1c802429f43c
-
SSDEEP
768:Pul7DzTBeidfTeiZRVWxhwkXno0L7rTLujfqUL3:WldXkXo8rTajz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65421e83efa79d61bbfa0cec91c1cdb2_JaffaCakes118
Files
-
65421e83efa79d61bbfa0cec91c1cdb2_JaffaCakes118.exe windows:4 windows x86 arch:x86
482ea7b49481ccb9a2f155f65a5d858f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
/Text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ