Static task
static1
Behavioral task
behavioral1
Sample
fff8dcd61fb36a828dda906c9ecf2263_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fff8dcd61fb36a828dda906c9ecf2263_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fff8dcd61fb36a828dda906c9ecf2263_JaffaCakes118
-
Size
88KB
-
MD5
fff8dcd61fb36a828dda906c9ecf2263
-
SHA1
a4e24e2ec7fafde0529b4b6f9da0af1e907887ec
-
SHA256
17f7fa9a0abfe5ace9bc526b1bb787f83632f380e77451563f87eabd345f93fb
-
SHA512
935d174c0cb42a16c834ec50b17c715c342532c0b447e2abe506bda2170852c28e2d3851d7f9e7103bf8a47485718133ba1a43b4b1db66a11b47b26328e7818e
-
SSDEEP
1536:+Ufiwo/aC2ke+N+YUFrNU2yM+JmFFJfC5sNT81z82qbTCT:n6woiCZjN+YUFrrN1cdzOb2T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fff8dcd61fb36a828dda906c9ecf2263_JaffaCakes118
Files
-
fff8dcd61fb36a828dda906c9ecf2263_JaffaCakes118.exe windows:4 windows x86 arch:x86
d7c3c9382b43e5478a56ea7d42452cdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 34KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ