Static task
static1
Behavioral task
behavioral1
Sample
09dd19513d98fe141977b3f9bbaa121f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
09dd19513d98fe141977b3f9bbaa121f_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
09dd19513d98fe141977b3f9bbaa121f_JaffaCakes118
-
Size
52KB
-
MD5
09dd19513d98fe141977b3f9bbaa121f
-
SHA1
35eb9ccc984aa7242f529314315e8128ccf493e2
-
SHA256
c5bee6a2f20208d9ff5e85f6fd56909c4de06376d008e035ec7ff3832cb8f526
-
SHA512
d837860840c1bd85645461d6fd2314067cd1b2a03be643cb7b5cbbdb75da0332a459da1bd607a59b2513af83ee1b08863d1929870deb7952676d5c0150dfcdc1
-
SSDEEP
768:Zl0PdawCks4eVdrW2WeG4usRPCxcPsO5lJUl9oVFj10QJjn3Eq3TeFqvtn/R1U5Q:McwOqRCY4jJ4oFj10YlPv9JG5sz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09dd19513d98fe141977b3f9bbaa121f_JaffaCakes118
Files
-
09dd19513d98fe141977b3f9bbaa121f_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ