Static task
static1
Behavioral task
behavioral1
Sample
08ac502bb6d4f0df6d20698e26f8fa07_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
08ac502bb6d4f0df6d20698e26f8fa07_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
08ac502bb6d4f0df6d20698e26f8fa07_JaffaCakes118
-
Size
14KB
-
MD5
08ac502bb6d4f0df6d20698e26f8fa07
-
SHA1
5c00752579346dc01e9c82786f45fc8a0d1c3c27
-
SHA256
02d78f946c14150e93fe0334000be80527be65e090eb7db87d0a5d70189fba64
-
SHA512
2247e6de458f96780f9a2d7d9e32092cfa5b3416b390b99944a98cf0a4814334bf57ad25154e2caddb00b55f818ea449bb4a95a5949844f4e85b29f7a9aaa8e7
-
SSDEEP
192:T70Uw8zetg6Qv/Zn4j1DRvu6Q50S1/bNTT/+MjrlCY0LHGZ9fjYwoMIh:/Vmg6sMDFjx4TNTTNKHGZ9jXoJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08ac502bb6d4f0df6d20698e26f8fa07_JaffaCakes118
Files
-
08ac502bb6d4f0df6d20698e26f8fa07_JaffaCakes118.exe windows:4 windows x86 arch:x86
e1ad2f986ad7f776fd3caffde19f0d01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
HeapReAlloc
HeapFree
ExitProcess
FindNextFileA
FindFirstFileA
FindClose
GetProcessHeap
VirtualFree
VirtualAlloc
GetModuleHandleA
GetCommandLineA
user32
wsprintfA
MessageBoxA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 522B - Virtual size: 520B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 562B - Virtual size: 729B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vcJIA Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uDgpk Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ