Static task
static1
Behavioral task
behavioral1
Sample
821a533ee3d5a089e6eafb8a2225b3e2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
821a533ee3d5a089e6eafb8a2225b3e2_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
821a533ee3d5a089e6eafb8a2225b3e2_JaffaCakes118
-
Size
35KB
-
MD5
821a533ee3d5a089e6eafb8a2225b3e2
-
SHA1
4059dc293d2728cb153fa995bb13008499d450d3
-
SHA256
82cecb4737732f914e0085824ce90209ccb988b1a4efdc6f094c58de8ba55163
-
SHA512
39610b30813676d865392c322e7cf75af4e88b570966a133425a885bddd38c01c88ca01221f8320de70890ca38c4ca0f1fefbed79474468fca06ca5b30f32410
-
SSDEEP
768:VXkKKmnMLGU8+IJrDXxhSjSxmrqqQUPEII7h5J:CKKmnZ+IJ3hMhqqQUPlQnJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 821a533ee3d5a089e6eafb8a2225b3e2_JaffaCakes118
Files
-
821a533ee3d5a089e6eafb8a2225b3e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d710213b3a7d904e410c2e3df28ac5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
HeapDestroy
HeapFree
HeapCreate
user32
KillTimer
SendMessageA
SetTimer
UpdateWindow
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 350B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ