Static task
static1
Behavioral task
behavioral1
Sample
ddc91787037c1beea4378db9af68cedd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddc91787037c1beea4378db9af68cedd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddc91787037c1beea4378db9af68cedd_JaffaCakes118
-
Size
31KB
-
MD5
ddc91787037c1beea4378db9af68cedd
-
SHA1
48570ff6f504517654cb6c93c77e6a4ac37c31b7
-
SHA256
b07c59b6233138ee1f43dc072c5b48b1f58c1086564e2ba133756828b41c727f
-
SHA512
ec4d6b5625c56eb6f9a1309a42656d772c9c248f6f3f128bcad8abb3ea8927be18bac19c724109d69aa406ff9009ae23cceeebfd7ee5adfa40a7ebb603fb75ae
-
SSDEEP
768:Zuh7TzTBFiCfTeiZSVWhhwEknR0L7OTLeNfQfd:UZ5GEkR8OTKNA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddc91787037c1beea4378db9af68cedd_JaffaCakes118
Files
-
ddc91787037c1beea4378db9af68cedd_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ