Static task
static1
Behavioral task
behavioral1
Sample
c789df324a4aefdf2d43596260bafd03_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c789df324a4aefdf2d43596260bafd03_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c789df324a4aefdf2d43596260bafd03_JaffaCakes118
-
Size
30KB
-
MD5
c789df324a4aefdf2d43596260bafd03
-
SHA1
732b6bcd0a2a6d03be9c7f98db1abdf3d4bc8a39
-
SHA256
b6daeab59912633035a4fe359922f96d7445b55f87f3edba521d911deabfe658
-
SHA512
6d53710be0fea38b48c95745c840e9a85e68fa3c99c263c570ca8b0933d6ae317cb597cf469879ab26330fdd1667c4c14e49ce9c087b513d821f64adfac910fe
-
SSDEEP
768:qwYviH5v8qbJ+M569B8ZMABPgVj1PfZ9/J:qwYqZ0HwDB6Px9x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c789df324a4aefdf2d43596260bafd03_JaffaCakes118
Files
-
c789df324a4aefdf2d43596260bafd03_JaffaCakes118.exe windows:4 windows x86 arch:x86
fa2d02e80f177119b49b0d790d1be4cb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
CancelIo
SetEvent
lstrcpynW
ResetEvent
CreateEventW
GlobalUnlock
GlobalSize
GetStartupInfoA
WriteProfileStringW
Sleep
lstrcmpW
GlobalReAlloc
GlobalFree
GlobalAlloc
GlobalCompact
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ