Static task
static1
Behavioral task
behavioral1
Sample
d572b68aa99e93f3afe388c1863b8722_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d572b68aa99e93f3afe388c1863b8722_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d572b68aa99e93f3afe388c1863b8722_JaffaCakes118
-
Size
29KB
-
MD5
d572b68aa99e93f3afe388c1863b8722
-
SHA1
dbb171260591210f6b9bbc52d5c9ecb6c2130057
-
SHA256
5ebb4c9860cfdf82f81d453d5ab162b8091dbdccc0402ca991d2bbddc41c2b7a
-
SHA512
af80c31a5996030781651c79c0f5cc9e249464eee249e97ce95239f333e9de95ffb3dae052eef135001d80b7e3c9a6dd585c77c94c2a624ee8b7e63dba2b160b
-
SSDEEP
768:geLMhlzjRKiQWgdgmWhtaXxNZbR3Xe9lZ3Fl6XbDn:1AzjRpngfsaXv3eJb6/n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d572b68aa99e93f3afe388c1863b8722_JaffaCakes118
Files
-
d572b68aa99e93f3afe388c1863b8722_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 927B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ