Static task
static1
Behavioral task
behavioral1
Sample
73b703122d0da20c5317ac12062dffcc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
73b703122d0da20c5317ac12062dffcc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73b703122d0da20c5317ac12062dffcc_JaffaCakes118
-
Size
153KB
-
MD5
73b703122d0da20c5317ac12062dffcc
-
SHA1
fbe46beafdedf2113b1733fc348c2930c6a105f5
-
SHA256
05666767ddacd05feac79080a17a74e322188f058a5cbab9771119cbacdb0d65
-
SHA512
fcaddedaa990e5553c7175a6e00cc9ab48df3036f2a2dd75f201fd02a2cead8c98d17b2eabbe4e67f7e0bd9e5ec84023fb473345270ca868e507b9e55bde3f8c
-
SSDEEP
3072:GJkyFCStB3uJL89knoUi7lW1k8RZEZaWTAkDDHDdOZUmtnBq:G5JB31CoUi7wC8RZoVFZmm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73b703122d0da20c5317ac12062dffcc_JaffaCakes118
Files
-
73b703122d0da20c5317ac12062dffcc_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c2fe897ff9207ddcc74ee35f8b95f8c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
FindWindowA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA
msvcrt
__getmainargs
urlmon
URLDownloadToFileA
Sections
.text Size: 23KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE