Static task
static1
Behavioral task
behavioral1
Sample
83c9f48e1c25383c75aa4ac94ea34975_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83c9f48e1c25383c75aa4ac94ea34975_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
83c9f48e1c25383c75aa4ac94ea34975_JaffaCakes118
-
Size
63KB
-
MD5
83c9f48e1c25383c75aa4ac94ea34975
-
SHA1
aa5a51bf2226cbf3df303b731d7a1b746808261e
-
SHA256
aa3e3085e75f306e5088cf51b9677e2372cc302a42a71cb9da8b196544fe8554
-
SHA512
efa64f79ac47099014abab5e28bf100877e61ac02e84f35243f3c297589c638432ef5642c098a4bf22a4a81d4073d8fa99f0bffbc4939d2df022f20249ceb63f
-
SSDEEP
1536:1Ufiw+85C2be+NoYUFrl3vQLJ1QU0NqlVII:m6w+UCejNoYUFrlAJ1QrqfII
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83c9f48e1c25383c75aa4ac94ea34975_JaffaCakes118
Files
-
83c9f48e1c25383c75aa4ac94ea34975_JaffaCakes118.exe windows:4 windows x86 arch:x86
d7c3c9382b43e5478a56ea7d42452cdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ