Static task
static1
Behavioral task
behavioral1
Sample
b54c1470a9eab686fc2e6968d8489809_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b54c1470a9eab686fc2e6968d8489809_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b54c1470a9eab686fc2e6968d8489809_JaffaCakes118
-
Size
56KB
-
MD5
b54c1470a9eab686fc2e6968d8489809
-
SHA1
2baa14aceb01edb286612b7ec799db78bfd33ad6
-
SHA256
1c1a78f58ac5ce1931b7ce5f895c1a41d128e3c766d08d5821abb7c39fc514f8
-
SHA512
28910c7f3c9f96f06565dcfde19bb0618ea4808777bd9037ccc1c8440ad9bda104bc7ed59541ed27066b28edd8835f9feaa15cf829d07fcbfa23eb84522fc5ad
-
SSDEEP
1536:MSZ/nEEh8uTKN+Dl4zz8aTrXK3noOl9SEWq:nRhzKN+Szz8kGn8EWq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b54c1470a9eab686fc2e6968d8489809_JaffaCakes118
Files
-
b54c1470a9eab686fc2e6968d8489809_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ