Static task
static1
Behavioral task
behavioral1
Sample
ea91c4b6011ac0d3e3db990909a41109_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ea91c4b6011ac0d3e3db990909a41109_JaffaCakes118
-
Size
130KB
-
MD5
ea91c4b6011ac0d3e3db990909a41109
-
SHA1
b515a032434a629e45e9eeaa2fb1eee2aaea6ba9
-
SHA256
d9bb317fdb77b3abe32c4be852c1e374397310bc1c405eac3ee05a9d918e1077
-
SHA512
67a8a887fe1c7f65f470753d17bce36c3b4ec05b3486ec39e50ee20414ab61ef31d5780af8e29bb84857cb99a2b25ebe2cd7196eb04055b73985e0714df0559e
-
SSDEEP
3072:C6w+UCejN3YUFrHpV7PF8Xhpu2exxi81uwnKN1ch:C6PcFNMpjefih2KN1C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea91c4b6011ac0d3e3db990909a41109_JaffaCakes118
Files
-
ea91c4b6011ac0d3e3db990909a41109_JaffaCakes118.exe windows:4 windows x86 arch:x86
d7c3c9382b43e5478a56ea7d42452cdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE