Static task
static1
Behavioral task
behavioral1
Sample
fbd56d11e44ee053c1dc3a3486c41d49_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fbd56d11e44ee053c1dc3a3486c41d49_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbd56d11e44ee053c1dc3a3486c41d49_JaffaCakes118
-
Size
31KB
-
MD5
fbd56d11e44ee053c1dc3a3486c41d49
-
SHA1
9f60be3cea1547ee93d921fafecaee5f743c64c0
-
SHA256
62b8666dd629c385e629e1614897c37a9c19ae56970936c591c6fef4dd608fa9
-
SHA512
32f02053084e38824d1e9994066b4adec27dbaf957cd95e0c3b660e5d4cecb878edcccc5615f7926bf22ce68643104a4bf48ffc2f4c7fa7445c99cffa2fad288
-
SSDEEP
768:Z+DTzTBziifTeiZSVWihwEknh0L7OTLeNfQfC3:kD/nEkh8OTKNr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbd56d11e44ee053c1dc3a3486c41d49_JaffaCakes118
Files
-
fbd56d11e44ee053c1dc3a3486c41d49_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ