Static task
static1
Behavioral task
behavioral1
Sample
0971da84868b3b2910003173157bd697_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0971da84868b3b2910003173157bd697_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0971da84868b3b2910003173157bd697_JaffaCakes118
-
Size
54KB
-
MD5
0971da84868b3b2910003173157bd697
-
SHA1
967380e2fed152913a27a5e8c19e8b35b4a6d48b
-
SHA256
e99cea45348a2da078261286805781fa44e31ca5c96853654b128070e7472881
-
SHA512
96084eae60250213e37b6ffd925fb2353a580c77213585c28eeb288c13e2b0f9a28bc2fc287cb49b4c78d85ec7616b54a89ef243129f3faea0a14f1ef5d9be78
-
SSDEEP
768:4MvFIYm0on6HGavZRTQffoaFNHio0Qp0GRi2vM+Fb2xQWBkmdfNhan5F0eYhxA9a:DcV6HGavEgaNg+FOnB51ha5FSkNDu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0971da84868b3b2910003173157bd697_JaffaCakes118
Files
-
0971da84868b3b2910003173157bd697_JaffaCakes118.exe windows:6 windows x86 arch:x86
2ef49522ce0463e97fdd6acb95c1d99c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetMduleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapQlloc
GetProcessHeap
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ