Static task
static1
Behavioral task
behavioral1
Sample
861209729908e37788b730d3376ec102_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
861209729908e37788b730d3376ec102_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
861209729908e37788b730d3376ec102_JaffaCakes118
-
Size
56KB
-
MD5
861209729908e37788b730d3376ec102
-
SHA1
ba445df5d723e34df783eabbedabfc3476309276
-
SHA256
9167ca9be873298fbc28eec01ed8ce62e2c0b3f8ad2994c40e70507f5ab0a9dd
-
SHA512
5c3c686fef083cb6e749d1d1c23e46ffccfce79be61b9a1843c58f1bd9dc67e2265f1ae534f262acf6f4aa0329aec10c74c4aac2fb080d5212ae0234ced579eb
-
SSDEEP
768:xh7TzTB+iSfTeiZSVWShwEknG0L7OTLe9flUK9J4EMv6sjDAxx3s5N6ILB54EJs:xZU3EkG8OTK99jXMv6sfexc3LB54EJs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 861209729908e37788b730d3376ec102_JaffaCakes118
Files
-
861209729908e37788b730d3376ec102_JaffaCakes118.exe windows:4 windows x86 arch:x86
4c315ed6ac77dbcf59e4a8733487695d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
GetCommandLineA
GetTickCount
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ