Static task
static1
Behavioral task
behavioral1
Sample
8a33cddf54c27ae62cb695970fa6cd3e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8a33cddf54c27ae62cb695970fa6cd3e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a33cddf54c27ae62cb695970fa6cd3e_JaffaCakes118
-
Size
352KB
-
MD5
8a33cddf54c27ae62cb695970fa6cd3e
-
SHA1
4d957f2894e7a37490cc3ba3d33e1ac581ac73b4
-
SHA256
c0af1afd92d18200e02eee19d3b36b8f3b95f542f2fbde326f88e691eff10e08
-
SHA512
f35811f5094f4a6b86ec47a04f53fa54c4418450d8fe12d0a9576db1af89f80ac6c01ad456d0bd20996435850ef625d19708ef0540a7747012720c2524611ade
-
SSDEEP
6144:Zcpbs3uci2Eh34yYcmuz/CYhF7A3YpW42z7mBjR43Q7GD1kZpPm5pbSiJ1z:SIuci5YVuzCYhF86h14EGDGaF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a33cddf54c27ae62cb695970fa6cd3e_JaffaCakes118
Files
-
8a33cddf54c27ae62cb695970fa6cd3e_JaffaCakes118.exe windows:6 windows x86 arch:x86
35d7884818d58b2093a5d485d42eb31e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStdHandle
GetCommandLineA
VirtualProtect
ExitProcess
GetLastError
GetStartupInfoA
GetCommandLineA
GetModuleHandleA
Sections
.text Size: 342KB - Virtual size: 908KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ