Static task
static1
Behavioral task
behavioral1
Sample
be33d3460cac595c0276984414482bf0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
be33d3460cac595c0276984414482bf0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
be33d3460cac595c0276984414482bf0_JaffaCakes118
-
Size
247KB
-
MD5
be33d3460cac595c0276984414482bf0
-
SHA1
f930647c3247cbb8daa479f916072f045ecb423e
-
SHA256
06186414b3f2242aea68e92354ef85e4436424eaa0c5877551c29a3720a60f6c
-
SHA512
9e5f6a01e606145d639541055b603ebcf8c47b2e85e77e956a33bbfc3bd77ab25dbee40fff29e0ec9a70d97638369b0155a8444c25f96df0bb1459577e79e512
-
SSDEEP
3072:YxhTKN4uFKlnq3nCc/OBfykxAkVfw2PJy87Fh3TXpmDr0jLS:olK+TgZQIkVI2tXkuS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be33d3460cac595c0276984414482bf0_JaffaCakes118
Files
-
be33d3460cac595c0276984414482bf0_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 193KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ