Static task
static1
Behavioral task
behavioral1
Sample
754431ce1559f2603b5621ba6b14adb5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
754431ce1559f2603b5621ba6b14adb5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
754431ce1559f2603b5621ba6b14adb5_JaffaCakes118
-
Size
29KB
-
MD5
754431ce1559f2603b5621ba6b14adb5
-
SHA1
4c859ba49a1c6261146b13e89fbab0a83e746fc0
-
SHA256
6e0b7bb3124af0c6efc9ec313d0026c61ea0aa959bccb916dde5648eaac73f03
-
SHA512
d275e2e1d1e6d12dc6c515e932b6ce65de6db04f8afd2279fff9bb60a267009308a83d13c1bfe75a35a3dbcd70f5e3d4bc304a5a766a2c64de5301c1d03d2508
-
SSDEEP
768:UeLMhlzjRKiQWgdgmWhtaHxNZbR3Xe9lZ3Fd6XbDn:BAzjRpngfsaHv3eJD6/n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 754431ce1559f2603b5621ba6b14adb5_JaffaCakes118
Files
-
754431ce1559f2603b5621ba6b14adb5_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.TEXT Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.R2RC Size: 927B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ