Static task
static1
Behavioral task
behavioral1
Sample
c29833a8035208228d431e496b65e1f7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c29833a8035208228d431e496b65e1f7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c29833a8035208228d431e496b65e1f7_JaffaCakes118
-
Size
41KB
-
MD5
c29833a8035208228d431e496b65e1f7
-
SHA1
7eaf2bd36d959bcecf1239d6f35853ae8cef7614
-
SHA256
ee3a376ab63bc94b00749b9780ae8f368ec39266d644230e3d30e2ca9a87924d
-
SHA512
a4b26a39f57798cb522066a3884fc07f22860733daeb75a5473500866212ad7e028cca4389c80f374d3475217591e3c6bc6c25520bda374f5905ef7b43e1d3f8
-
SSDEEP
768:JbTqavYjTvEBTfVDAyNX8PFOJ40feIaFzSUqSH3Ux/:JbTqBjT8fhAyF8NKeIaJEx/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c29833a8035208228d431e496b65e1f7_JaffaCakes118
Files
-
c29833a8035208228d431e496b65e1f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
054e4e5c28d6533b44ae24cbf3e08a15
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
lstrcatA
user32
SetWindowPos
AttachThreadInput
SetForegroundWindow
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 300B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ