Static task
static1
Behavioral task
behavioral1
Sample
6f61addfc5bda3febc79f55a2c9da158_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
6f61addfc5bda3febc79f55a2c9da158_JaffaCakes118
-
Size
111KB
-
MD5
6f61addfc5bda3febc79f55a2c9da158
-
SHA1
a9446ab1839ac69f19f055c84b5a3290d8ffb503
-
SHA256
27e5aced70bd1ca78e4fb0150616d10627963fa58a7d8c601408d0d985594f33
-
SHA512
37aa848d289bc1b13e96ec66532671ad8d16c374439f5e892a16a1f3132d8d7af03cbec2ceff89760ba361ac5f5aa8ca2b9e84c01d3ffcf8c59064607911d15e
-
SSDEEP
1536:cZ/nEkh8OTKNXosbGRPvLddqhgz3KQ3/QLuo84MZDk+3jkGVUwvmPiv2elmqofC:CxhTKNXosezRz6QCl84n+zkGV8vJqofC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f61addfc5bda3febc79f55a2c9da158_JaffaCakes118
Files
-
6f61addfc5bda3febc79f55a2c9da158_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE