Static task
static1
Behavioral task
behavioral1
Sample
sample.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
sample.exe
Resource
win10v2004-20240802-en
General
-
Target
1309264ac882ed3ad377289c12811d99_JaffaCakes118
-
Size
27KB
-
MD5
1309264ac882ed3ad377289c12811d99
-
SHA1
903ffeccc4e4ac308590f57aae72b1771eceafcc
-
SHA256
979c3b4e4d31ff6c5dd19ef051df8668d242241ff00d8fcdecb8e9d76aa3c8d8
-
SHA512
6d827e97f427dab9e71a4a58442af1716377af309a8dca6cfd24b5d3976bf7f4a37c42503eb2129747663ea0025b75faf81a88599098be527623fc3d21ebdf81
-
SSDEEP
384:UuQon/Ig+WTv2AXl04WxYWkiRtkxS3YPPTwRlKR1On87x6TkexxSfX57JPuah7bz:UuXn/tCgl0xEiRtkx6LWSeQT7y7ZPWS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/sample
Files
-
1309264ac882ed3ad377289c12811d99_JaffaCakes118.gz
-
sample.exe windows:4 windows x86 arch:x86
482ea7b49481ccb9a2f155f65a5d858f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ