Static task
static1
Behavioral task
behavioral1
Sample
072b0d474d2c7d2cc6c6f6a96a4e2d2f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
072b0d474d2c7d2cc6c6f6a96a4e2d2f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
072b0d474d2c7d2cc6c6f6a96a4e2d2f_JaffaCakes118
-
Size
56KB
-
MD5
072b0d474d2c7d2cc6c6f6a96a4e2d2f
-
SHA1
1699ff6cc871ebabd402813b0cc3c7a4c7708483
-
SHA256
c2aa3c42b22b8b85e47ad20e84698cd16d03f3f5cea2fb51a441acc758694978
-
SHA512
8231aa88179afb314301bfae6b52879dbf6f82204f9f9d8eb3aca8c890617ea864d8b8e600f5acba5db847eaea1591c19f5aba1d44de35f7be931c1d2fc0d9ad
-
SSDEEP
768:Z+h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfH6MUboUIk8+6lMn5CrLhY4IS8uu:kZ/nEkh8OTKNN6R+64KLi4sfNac
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 072b0d474d2c7d2cc6c6f6a96a4e2d2f_JaffaCakes118
Files
-
072b0d474d2c7d2cc6c6f6a96a4e2d2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ