Static task
static1
Behavioral task
behavioral1
Sample
69a49cf32aaf10f70b23eaecc75b2f7e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
69a49cf32aaf10f70b23eaecc75b2f7e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69a49cf32aaf10f70b23eaecc75b2f7e_JaffaCakes118
-
Size
55KB
-
MD5
69a49cf32aaf10f70b23eaecc75b2f7e
-
SHA1
3fbf8471b0faa18aa9e233c159593aa9028c3042
-
SHA256
42bc97ee75ca08cb0f765a1c3ae88393cf86c360bbcd8e2c40057897f94db4eb
-
SHA512
abf7b37241df5dfa2dbc3f50df745b1b915a820429a4f371d945ab92153cfd6f7ef94425c63762f7d89609e803f9c6f71376320e2353ecc621491e0bc372405f
-
SSDEEP
768:MevFICm0on6HGavZUdQffoaFNnioNQp8GylFPVrqX2zm3yi53yO5GMuMQC3/z:F6V6HGavhgafRK2zm3VdyHfM1b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69a49cf32aaf10f70b23eaecc75b2f7e_JaffaCakes118
Files
-
69a49cf32aaf10f70b23eaecc75b2f7e_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ