Static task
static1
Behavioral task
behavioral1
Sample
53d8b063a1d650f4dfd294818fe90f51_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
53d8b063a1d650f4dfd294818fe90f51_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
53d8b063a1d650f4dfd294818fe90f51_JaffaCakes118
-
Size
42KB
-
MD5
53d8b063a1d650f4dfd294818fe90f51
-
SHA1
96810e462cb1d277f7c5245aab6cd7375ece603a
-
SHA256
a632043fddf1805aa4b1aec195c1f2ffcd91db89ba1ba0b3a803581a4f02cec6
-
SHA512
813325d29e0ce339fa8f9f4d127a887f330dd516d4fb884a11f8e58a00c562d276526b965dad73c7a2ed0b2d11ca4e686aa5df94127a1ddd067f84bd4b9a4f62
-
SSDEEP
768:PLl7DDTBeid/TeiZRVWRBwkXno0L7UTLuSn1UUTxe:jltXkXo8UTaSfte
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53d8b063a1d650f4dfd294818fe90f51_JaffaCakes118
Files
-
53d8b063a1d650f4dfd294818fe90f51_JaffaCakes118.exe windows:4 windows x86 arch:x86
482ea7b49481ccb9a2f155f65a5d858f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ