Static task
static1
Behavioral task
behavioral1
Sample
a165ba2cc9e7135c19186cd7c5662d89_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a165ba2cc9e7135c19186cd7c5662d89_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a165ba2cc9e7135c19186cd7c5662d89_JaffaCakes118
-
Size
54KB
-
MD5
a165ba2cc9e7135c19186cd7c5662d89
-
SHA1
9577d8997c169573d0be1fa6cc4bba407152e902
-
SHA256
e0415c66e5989d9677bff16b730ca004a1b0d9ec258426408b201d7c3188b2ea
-
SHA512
83dc61439020d0b62c9b0b3e039e43c0a691339780a53f7c2af431b0964bb41736ba0b97c6f4135cb903e294c729892fe6a1f3ca1cfeb347ed7e79aae066b9b1
-
SSDEEP
768:HMvFIYm0on6HGavZRTQffoaFNHio0QpEG6GxO0xvsCH7eoWOryvO5IMr1Xm0UCPP:0cV6HGavEga3x1pbe7ixXm0NHf/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a165ba2cc9e7135c19186cd7c5662d89_JaffaCakes118
Files
-
a165ba2cc9e7135c19186cd7c5662d89_JaffaCakes118.exe windows:6 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ