Static task
static1
Behavioral task
behavioral1
Sample
94f34dd241ada4fd1e07f274f4f1295e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
94f34dd241ada4fd1e07f274f4f1295e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
94f34dd241ada4fd1e07f274f4f1295e_JaffaCakes118
-
Size
27KB
-
MD5
94f34dd241ada4fd1e07f274f4f1295e
-
SHA1
6dfa5b5d461cd27d6474002913eb708e284a7731
-
SHA256
a4c4b822191f878a8193a30b153164b21e42a86f5dc42d1c79b1d2c83676d790
-
SHA512
029e03019a617f4eb5c6bc64fb03c0412f83ad516b250de5d4c2d85c948f30cbda1fb1cad56fdbf2b8444f75c1c236c8483e3ee5f63b53ff320b9870ba4615f5
-
SSDEEP
768:WzLMhlzjNKiQWgdgmWhtaHxNZbR3Xe9lM1:iAzjNpngfsaHv3e6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94f34dd241ada4fd1e07f274f4f1295e_JaffaCakes118
Files
-
94f34dd241ada4fd1e07f274f4f1295e_JaffaCakes118.exe windows:260 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
Size: 30KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ