Static task
static1
Behavioral task
behavioral1
Sample
0d6297ca3d943aa7a883f61de241fe8d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0d6297ca3d943aa7a883f61de241fe8d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d6297ca3d943aa7a883f61de241fe8d_JaffaCakes118
-
Size
30KB
-
MD5
0d6297ca3d943aa7a883f61de241fe8d
-
SHA1
241862d0140312e5f5cfe332f3b62db926c69dce
-
SHA256
af46f509925d30cb6620220f049d1a6ba914a4d98a203c8267035dda56c4eab8
-
SHA512
1307184f8f1f96ee19c6173e51a6f872c2490be1dc6e7e08a618ce4883dec59d7863b3260ff9f441ae82b1e1c9b82c54639da3af7387fc8886c432816c42a081
-
SSDEEP
768:6DogTzTBAyfTeiZ1VW0kwEqnRDL7bTLeTf3znOK:SBJ1EqRTbTKTX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d6297ca3d943aa7a883f61de241fe8d_JaffaCakes118
Files
-
0d6297ca3d943aa7a883f61de241fe8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
a7401fcc44086aa07514aecef37e1012
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetProcessHeap
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.TEXT Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.r2rc Size: 512B - Virtual size: 88B
IMAGE_SCN_MEM_READ