Static task
static1
Behavioral task
behavioral1
Sample
f9a4a1200bee37a2957711b49e2d43f1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9a4a1200bee37a2957711b49e2d43f1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9a4a1200bee37a2957711b49e2d43f1_JaffaCakes118
-
Size
54KB
-
MD5
f9a4a1200bee37a2957711b49e2d43f1
-
SHA1
4a45e28990cfd353a7001fd49fc84d7bfb5ff6bf
-
SHA256
6a4e9f2d2b04c4c0fd5cfe4c65567505b46a80c190840745b7f1219408a79809
-
SHA512
ea8a3c2ae68f5d840c469a295b7417e502f19483b8d52f366539a48be3deca22ef3215e714bb079d09afdfcfa3a17e4f488dab8ff0dbfc7cdfb10a39307d4d1a
-
SSDEEP
768:levFIYm0on6HGavZRtQffoaFNnioeQprGA9dzdS0W9ODOrvgmaGSt17/Rdo1:wcV6HGavqganyM+4maGSt1e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9a4a1200bee37a2957711b49e2d43f1_JaffaCakes118
Files
-
f9a4a1200bee37a2957711b49e2d43f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ