Static task
static1
Behavioral task
behavioral1
Sample
a393a3ad94b1e88a3408d7cc7ad5fe24_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a393a3ad94b1e88a3408d7cc7ad5fe24_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a393a3ad94b1e88a3408d7cc7ad5fe24_JaffaCakes118
-
Size
87KB
-
MD5
a393a3ad94b1e88a3408d7cc7ad5fe24
-
SHA1
757ed9698a71ba2e60861b1b75af7cb85861a1c0
-
SHA256
2c9f4c5a9659f0fa3d06e1f577fb5c59fcfa06c4d2f6f6ba0ee253b9a612d05c
-
SHA512
91b55c024df1ecabf738657006d52779a104fedae15fc51c57e607605bd8a8f3da9493085b6251b763d43e429a548d072b65f0323f66288ff1823e841dc6574c
-
SSDEEP
1536:/Ufiw+85C2be+N7YUFrNU2yM+JmFFJfC54lsnBmOdkErRKMJ1D:M6w+UCejN7YUFrrN1c4GBr9sU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a393a3ad94b1e88a3408d7cc7ad5fe24_JaffaCakes118
Files
-
a393a3ad94b1e88a3408d7cc7ad5fe24_JaffaCakes118.exe windows:4 windows x86 arch:x86
d7c3c9382b43e5478a56ea7d42452cdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 30KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ