Static task
static1
Behavioral task
behavioral1
Sample
8a73d0b00be5b28fe9d3e2df9488b268_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a73d0b00be5b28fe9d3e2df9488b268_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a73d0b00be5b28fe9d3e2df9488b268_JaffaCakes118
-
Size
72KB
-
MD5
8a73d0b00be5b28fe9d3e2df9488b268
-
SHA1
c37503773167b25982ee70d3acfee41e14969bd4
-
SHA256
69f348332c34e2e18f2cea020c2c6f65661ea00138b3e9ea06cdcbea63505c5b
-
SHA512
90b908658cf1006bb200372fed5af2f529cad336687c44bf0fd2b7d14ca1c05d15b413b532b3e65e30a06cee3d987f327d31a3ce2780b4b49e7adabaa9ef3d6a
-
SSDEEP
768:BXeO2Uni9zs6ktK3uepTOGTwnvabw0ujB+aBWdiQU8LSN3HBGn8mfdlomBFoCQ:52k65S+Nbw0+z4diQUlNXC8mfdlDQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a73d0b00be5b28fe9d3e2df9488b268_JaffaCakes118
Files
-
8a73d0b00be5b28fe9d3e2df9488b268_JaffaCakes118.exe windows:4 windows x86 arch:x86
307861e9fe414e6c5e62e96266643783
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetProcAddress
GetModuleHandleA
ExitProcess
LoadLibraryA
GetModuleFileNameA
HeapReAlloc
GetCommandLineA
HeapAlloc
GetProcessHeap
HeapFree
GetStartupInfoA
user32
wsprintfA
Sections
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 55KB - Virtual size: 705B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ