Static task
static1
Behavioral task
behavioral1
Sample
edf068867ed92698f6a034fb54aa595d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
edf068867ed92698f6a034fb54aa595d_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
edf068867ed92698f6a034fb54aa595d_JaffaCakes118
-
Size
26KB
-
MD5
edf068867ed92698f6a034fb54aa595d
-
SHA1
26a257f50258b47d830ab5c1a677fed73ae6888e
-
SHA256
fb61a302343375a1f4929d572dbda4cf00aab6390ff16226ee7a27866f98b760
-
SHA512
7519804d44df054f9a4f1039e491f447187264fa7bc39575c77f5eebac83fadf43f57becb0fa3aa72d59eb6a0e11aa908afac3751f0f0323da4b0ef7f1ab10fb
-
SSDEEP
384:AKiuVkeLtFA7IJyY1ou/1fTE4iggeFbftJI5LKd9CR7Zs2UjAR2B1n5AcWJ:rVzTAI319fmgDbTIpKd9als2OACXk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edf068867ed92698f6a034fb54aa595d_JaffaCakes118
Files
-
edf068867ed92698f6a034fb54aa595d_JaffaCakes118.exe windows:4 windows x86 arch:x86
28c6ef1128d2dc0d513ddf64919b7716
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE