Static task
static1
Behavioral task
behavioral1
Sample
0fa1a7d73cb54be582ad3ac7d7b86dbf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0fa1a7d73cb54be582ad3ac7d7b86dbf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0fa1a7d73cb54be582ad3ac7d7b86dbf_JaffaCakes118
-
Size
160KB
-
MD5
0fa1a7d73cb54be582ad3ac7d7b86dbf
-
SHA1
94e3bfaeacc4fdaa7b62a07c779cda268be8e124
-
SHA256
c20708e1ec8f1c559e7262e24d405246dc928c3ab9ad7423eb0366d482802736
-
SHA512
3978e98c5ee6e9ddbf109e73f67596544b06723c72785862171a9c1ef792ffddaf0b8884cde660c7320155905519d2c569abe1d707d7646300fc863f1866b558
-
SSDEEP
3072:JxhTKN90oNUexiojcRGfOB7dhcWVD3X1GAjsFMJWFEvK21yY8M:blKf0oNUeQgWdDceDJcGK2QY8M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fa1a7d73cb54be582ad3ac7d7b86dbf_JaffaCakes118
Files
-
0fa1a7d73cb54be582ad3ac7d7b86dbf_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ