Static task
static1
Behavioral task
behavioral1
Sample
6f57bf8969fcac14fe2ae00715f944f0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f57bf8969fcac14fe2ae00715f944f0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f57bf8969fcac14fe2ae00715f944f0_JaffaCakes118
-
Size
31KB
-
MD5
6f57bf8969fcac14fe2ae00715f944f0
-
SHA1
91e4a4054da6ca5970b65b4e7ddaf456f0327aa4
-
SHA256
e78f19677c7423f910d2a5fb3e265dca698570d652c390b3579e58d0ad0d66b3
-
SHA512
12182533c8a22a7b880cc422d2d3085592f77ec86dce27968c30c198a5d6e1d619a803d1aee88ca2500f409ae3a6642b34ae3e7e431f0d31e9db652d8781a06f
-
SSDEEP
768:Z+h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfo:kZ/nEkh8OTKNN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f57bf8969fcac14fe2ae00715f944f0_JaffaCakes118
Files
-
6f57bf8969fcac14fe2ae00715f944f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ