Static task
static1
Behavioral task
behavioral1
Sample
b93667fe4de88c49bb8351500d9197ac_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b93667fe4de88c49bb8351500d9197ac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b93667fe4de88c49bb8351500d9197ac_JaffaCakes118
-
Size
36KB
-
MD5
b93667fe4de88c49bb8351500d9197ac
-
SHA1
ce09d82774a0c1e9fa5371d9e96a6d401c6bea3c
-
SHA256
4dcdb9ddc55271dc9a52e81ef0f1d619dda42191c4b9a45d28affc1ce93b6710
-
SHA512
16b40e96143d0af9f777921ae5256c40464dc51c1181cdbc9e0c049753d1507db8af00efcd366e6fee8d7542f67e5533bc02d22380e518c460bd9e8f89dd8bc1
-
SSDEEP
768:yNPfXOhlKoLxtCt74y/842kGim5admgS0CX0MHS8YzXB6:mCKoLD+h/84UimkdxMyFrc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b93667fe4de88c49bb8351500d9197ac_JaffaCakes118
Files
-
b93667fe4de88c49bb8351500d9197ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ