Static task
static1
Behavioral task
behavioral1
Sample
0268faae8214adc02eef3e408834a643_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0268faae8214adc02eef3e408834a643_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0268faae8214adc02eef3e408834a643_JaffaCakes118
-
Size
80KB
-
MD5
0268faae8214adc02eef3e408834a643
-
SHA1
3bab5310ab8ef4a183cd025689783bc7f01dc83b
-
SHA256
87dc2f11c2009db320018fc5ef6b4b34ba8c46db6ae77b55a63dc4d32b7f69d3
-
SHA512
faac51568a9e2e20eaa1c68c619224792a001ce470006ad4895133ebc348f276be7952cd5c6d4e7e1b6db648bfd3823f27a57c47dcecb513695ac97148e022a2
-
SSDEEP
1536:RCKoLD+h/84UimkdxMSsKldRrzDAD8GXN+I7fJ+aCl1fe1isKldRqc:RCKomy45ZTVwzoI7h+aS1GCVqc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0268faae8214adc02eef3e408834a643_JaffaCakes118
Files
-
0268faae8214adc02eef3e408834a643_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE