Static task
static1
Behavioral task
behavioral1
Sample
a814feaf1f0d3b8bb58d7e40444ca869_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a814feaf1f0d3b8bb58d7e40444ca869_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a814feaf1f0d3b8bb58d7e40444ca869_JaffaCakes118
-
Size
30KB
-
MD5
a814feaf1f0d3b8bb58d7e40444ca869
-
SHA1
81e188c3232710c7c6da9cae7c9625fd64e549f2
-
SHA256
6e8dda3415d5975c255c992babc1688f720503d369a8cf0695f1448ccf8858fe
-
SHA512
a7e32b4c7a84aba46ada875fee25b9e0b7606f0ef471d2f12856ceb62ea39c1332ead9a6a48189981bda277d1e245e680d3f5092a4b8521f8aaf2a3fbfb98813
-
SSDEEP
768:7dkK1vMYmld6TUMRGk2A33aOoGp6Yi6tE:K0Oj67RGk2I3N8IE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a814feaf1f0d3b8bb58d7e40444ca869_JaffaCakes118
Files
-
a814feaf1f0d3b8bb58d7e40444ca869_JaffaCakes118.exe windows:4 windows x86 arch:x86
f84ff1fec7866e50d95c62e55aa5da77
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
Sleep
ConnectNamedPipe
user32
SetTimer
GetFocus
CharNextA
PostQuitMessage
gdi32
Escape
Sections
.text Size: 1024B - Virtual size: 966B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ