Static task
static1
Behavioral task
behavioral1
Sample
79124b894108b1a8dd6ca16d78c4fe98_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
79124b894108b1a8dd6ca16d78c4fe98_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
79124b894108b1a8dd6ca16d78c4fe98_JaffaCakes118
-
Size
192KB
-
MD5
79124b894108b1a8dd6ca16d78c4fe98
-
SHA1
ce02e4f00a8eec994d72f38a62cb889c7cfe08f8
-
SHA256
588e7eb8b0a3c467c0cecc7494d11f3c97f38d2a74fba788a1449736f59375c4
-
SHA512
28d972bad9ee92ccd18c2aa55bdf2e896c057e3aad94e1f1d4afdbb9233712a05c9eb48df1394b6fb7274c6b8c273762abd12a3dc84bafe213f5807bdaad9d2e
-
SSDEEP
6144:5zRK6QW+TLcr9j653akLV57TMaWwJepV1u:dFz+XMju/LVpTpgPu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79124b894108b1a8dd6ca16d78c4fe98_JaffaCakes118
Files
-
79124b894108b1a8dd6ca16d78c4fe98_JaffaCakes118.exe windows:4 windows x86 arch:x86
28c6ef1128d2dc0d513ddf64919b7716
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ