Static task
static1
Behavioral task
behavioral1
Sample
b24e8e132358d3e4ee4d4ec872c0de02_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b24e8e132358d3e4ee4d4ec872c0de02_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b24e8e132358d3e4ee4d4ec872c0de02_JaffaCakes118
-
Size
23KB
-
MD5
b24e8e132358d3e4ee4d4ec872c0de02
-
SHA1
76bc634a8004437daae4cbf6b18124ef2b8eb843
-
SHA256
34fd269494c133c213472567f6db3d1142b4c2b70da29fdce91d7e840352db80
-
SHA512
a3a4922796de8bf1239a594e1ff6f7e347871857070e280b9445ee0b4d6c630b5267c8edff33a0007603e29e6e77fa6a8c59e1f6513ce88f8ac1ff9444354602
-
SSDEEP
384:zkXbfllgV3edlMacsed3D2mi0buOPxmO1uw7EsBj8N49ebBNZgkcm:zQtndlMaOzbuOPx1XE8GtNZ7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b24e8e132358d3e4ee4d4ec872c0de02_JaffaCakes118
Files
-
b24e8e132358d3e4ee4d4ec872c0de02_JaffaCakes118.exe windows:4 windows x86 arch:x86
648e74ed3df0de0f3fe2e40770d9346e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconA
LoadCursorA
GetMessageA
DispatchMessageA
DestroyWindow
DefWindowProcA
TranslateMessage
CreateWindowExA
kernel32
Sleep
RtlZeroMemory
GetTickCount
GetModuleHandleA
GetCommandLineA
ExitProcess
lstrcatA
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 458B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ