Static task
static1
Behavioral task
behavioral1
Sample
443d0943b8c0bcf4d225b1a9f78927d0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
443d0943b8c0bcf4d225b1a9f78927d0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
443d0943b8c0bcf4d225b1a9f78927d0_JaffaCakes118
-
Size
63KB
-
MD5
443d0943b8c0bcf4d225b1a9f78927d0
-
SHA1
6d5ac6074b8df74208ded59e741cbb3176e0ad82
-
SHA256
7793ca67a687648626daa1f42c41a1867d3aea34e5b045c5c56a7a4375dba14d
-
SHA512
5c90b2ce93210a80027acc288a4fcfe7d8717538345ef357981bcde5643e8f25e9e06012f6edfbbf3885dde00ca8e235e609f3756e2f76aa05a6b8ca3c029d46
-
SSDEEP
1536:1Ufiw+85C2be+NoYUFrPvQLJ1QU0NqlVII:m6w+UCejNoYUFr4J1QrqfII
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 443d0943b8c0bcf4d225b1a9f78927d0_JaffaCakes118
Files
-
443d0943b8c0bcf4d225b1a9f78927d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
d7c3c9382b43e5478a56ea7d42452cdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ