Static task
static1
Behavioral task
behavioral1
Sample
a7ca831aa2f7f0726ea02685e818f62b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a7ca831aa2f7f0726ea02685e818f62b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7ca831aa2f7f0726ea02685e818f62b_JaffaCakes118
-
Size
13KB
-
MD5
a7ca831aa2f7f0726ea02685e818f62b
-
SHA1
d392ea9f6e09b286c999628379966226ff336835
-
SHA256
2007b7bb05139ecfeaa6fa57f8442aa009f215137caefca90c2572652f791489
-
SHA512
41a3b76c7e018d6807db716b8200af91b98dcd946133a016c53aa6684981827e38fa440a5d40dc136dff4686036c9b9972b13f449583bbc8cd2301e68cce8c3b
-
SSDEEP
384:r8ySKXN2I46XvP0POd8dhMrnPliQerNc:VX0POVT9reJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7ca831aa2f7f0726ea02685e818f62b_JaffaCakes118
Files
-
a7ca831aa2f7f0726ea02685e818f62b_JaffaCakes118.exe windows:4 windows x86 arch:x86
80dd7780260da472f2f8f78804fb4cfe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
GetACP
user32
GetForegroundWindow
wvsprintfA
Sections
.text Size: 512B - Virtual size: 186B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 230B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ