Static task
static1
Behavioral task
behavioral1
Sample
a85a3ba9fe0d4029f09556eeb5309efd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a85a3ba9fe0d4029f09556eeb5309efd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a85a3ba9fe0d4029f09556eeb5309efd_JaffaCakes118
-
Size
113KB
-
MD5
a85a3ba9fe0d4029f09556eeb5309efd
-
SHA1
1e1117eb7f937fcbe9a2030370bc8c48502a205f
-
SHA256
f8d883470d5b4741f44ed83991c20a9b015e83bf892f315138c711ebd44ce6ad
-
SHA512
8b3606f2c828a0d6158f3e2b5f96f7c3127afdb3fa506b03b988411fefbea6db19099601154c5945c4ad1be284f67571223706de270d461f5d1c665841758d64
-
SSDEEP
1536:JyzryeizkN0QuC2nGGvUHoEsjvE5EqE/uXrFnkxzL22pZ7ALYfND9cFdQS3wPoe:JyzrZRN0fSoEsnuXrFkBZlSwPoe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a85a3ba9fe0d4029f09556eeb5309efd_JaffaCakes118
Files
-
a85a3ba9fe0d4029f09556eeb5309efd_JaffaCakes118.exe windows:4 windows x86 arch:x86
0fd4060da2826f2ef707373a70f09320
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
GetVersion
GetCommandLineA
GetStartupInfoA
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sleep
GetACP
user32
DefWindowProcA
RegisterClassExA
CreateWindowExA
GetSystemMetrics
ShowWindow
GetDC
ReleaseDC
FindWindowA
GetMessageA
DestroyWindow
gdi32
SetPixel
Sections
vcasm Size: 26KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vcasm Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE