Static task
static1
Behavioral task
behavioral1
Sample
8efa4cc8d0432e465d615b0b97196483_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8efa4cc8d0432e465d615b0b97196483_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8efa4cc8d0432e465d615b0b97196483_JaffaCakes118
-
Size
31KB
-
MD5
8efa4cc8d0432e465d615b0b97196483
-
SHA1
72782443bd5a710d1fa3046c43fef70e191319fc
-
SHA256
f98fecb9e1eb0e25f8ec40920d04332bb16835f365f863f955758128f13cad2f
-
SHA512
6e8a49f3c9bb071d347706df63064c178ea69c8772711d167e3bf016b6fc987fb5115c24397dac01791dcc8711d7be328c6cc47713bd2efc2b8d87a5bfa8ed38
-
SSDEEP
768:Z+x7TzTBziifTeiZSVWihwEknh0L7OTLeMfQfxy3:kJ/nEkh8OTKMOq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8efa4cc8d0432e465d615b0b97196483_JaffaCakes118
Files
-
8efa4cc8d0432e465d615b0b97196483_JaffaCakes118.exe windows:4 windows x86 arch:x86
47c31982182bb14921999b9e8171fa45
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddres�
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ