Static task
static1
Behavioral task
behavioral1
Sample
a63cb951fedb6ef5f77366ce40496a4d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a63cb951fedb6ef5f77366ce40496a4d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a63cb951fedb6ef5f77366ce40496a4d_JaffaCakes118
-
Size
31KB
-
MD5
a63cb951fedb6ef5f77366ce40496a4d
-
SHA1
309cef98a93bda4734f69acd83e27d8d9a6645a4
-
SHA256
90012a745b6a1462a352c1cd0020539988b19c8ef87e4a37b042af5813482586
-
SHA512
35144281e3f6d108305730cbd7314a17c58d828d5a0c34c2e201151fa118ab933ed8d74442460984f039deec80a19bc8f7e212944f585ae7b6c85821309a9f5a
-
SSDEEP
768:z1PfXOhlKoLxtCt74y/842kGim5admgS0CX0ML:JCKoLD+h/84UimkdxML
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a63cb951fedb6ef5f77366ce40496a4d_JaffaCakes118
Files
-
a63cb951fedb6ef5f77366ce40496a4d_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ