Static task
static1
Behavioral task
behavioral1
Sample
a63e7d97178ca5ee211e15eeb9d3b8d2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a63e7d97178ca5ee211e15eeb9d3b8d2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a63e7d97178ca5ee211e15eeb9d3b8d2_JaffaCakes118
-
Size
29KB
-
MD5
a63e7d97178ca5ee211e15eeb9d3b8d2
-
SHA1
009b7c02a465bbefe54ca605bded720a3641d727
-
SHA256
ca1bd3f62ee14c39d1e8534404d5cb3399f7a7d4f50d488b614d94399fa2efbf
-
SHA512
ed50d2a7a74d2c4ad48ac461377f73dc51b9720dfba05458e20c0b400d07354358267d43c75e2db846211966e39c14ae52b92c44c31905dee8f39bb6a8800ae7
-
SSDEEP
768:keLMhlzjRKiQWgdgmWhtaHxNZbR3Xe9lZCB:xAzjRpngfsaHv3eJCB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a63e7d97178ca5ee211e15eeb9d3b8d2_JaffaCakes118
Files
-
a63e7d97178ca5ee211e15eeb9d3b8d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.fgtuu7 Size: 6.7MB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tdtG Size: 927B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE