Static task
static1
Behavioral task
behavioral1
Sample
9735bc39922d14b002ce0fd3840a743a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9735bc39922d14b002ce0fd3840a743a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9735bc39922d14b002ce0fd3840a743a_JaffaCakes118
-
Size
31KB
-
MD5
9735bc39922d14b002ce0fd3840a743a
-
SHA1
aff90da77ebaae2628f8845788005d4d1a8ccb83
-
SHA256
2379774c30ed0cf3884a44033735d0383fc037ac99f852139c06dedd49b042bd
-
SHA512
07c121b0aa2d083d06ef2e4100c51fcf62e855e8e7c9872270384a14e54c1bf88d5db9c8cf455c3a2652fd577b19e94b06cba0e9bcc217c6a035b8eff927e9c2
-
SSDEEP
768:Z+h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfO:kZ/nEkh8OTKNL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9735bc39922d14b002ce0fd3840a743a_JaffaCakes118
Files
-
9735bc39922d14b002ce0fd3840a743a_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ