Static task
static1
Behavioral task
behavioral1
Sample
d4adea6bffd0154b061a48de56763d16_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4adea6bffd0154b061a48de56763d16_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4adea6bffd0154b061a48de56763d16_JaffaCakes118
-
Size
54KB
-
MD5
d4adea6bffd0154b061a48de56763d16
-
SHA1
a25c5cb0e2c790c5513b2a039a3a799131eee68f
-
SHA256
06b920c6e45d25923c2c86b1d07deb2fc15dca36aa50eb1822ff9f8c63b997e3
-
SHA512
93f7858e687e974e671d58a69692d6b125cad8952ad64debe2ba34cbf77480c9e9aee740a65496191e7d62f32651c942a9a58047b301276af55275eecd53a150
-
SSDEEP
768:HMvFIYm0on6HGavZRTQffoaFNHio0QpEGRGxO0xvsCH7eoWOryvO5IMr1Xm0UCPP:0cV6HGavEgaUx1pbe7ixXm0NHf/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4adea6bffd0154b061a48de56763d16_JaffaCakes118
Files
-
d4adea6bffd0154b061a48de56763d16_JaffaCakes118.exe windows:6 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ