Static task
static1
Behavioral task
behavioral1
Sample
2213c51453bf3880421855544c0b87da_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2213c51453bf3880421855544c0b87da_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
2213c51453bf3880421855544c0b87da_JaffaCakes118
-
Size
639KB
-
MD5
2213c51453bf3880421855544c0b87da
-
SHA1
cab05821d36b132ae6389534d870e230d76a4949
-
SHA256
67b881a51cc23e91c0aed2179f4d5c4af9acb150fc803e72ed134d71ac64308e
-
SHA512
1f205189c977543dd4ba39abb007106abe66524a65af24aa05c64b2a38b494d12d3a69f046ad8501d5acb46e1d22de3191a36b405d2472a4ffba7d0701d81405
-
SSDEEP
12288:d1+suZE+78LlhxTL+Z4gmx3JLu/FWOZio0GTBBeolklMP9Lq9dXWdIw7:+suA7NO1mKQA/fKolklMIGF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2213c51453bf3880421855544c0b87da_JaffaCakes118
Files
-
2213c51453bf3880421855544c0b87da_JaffaCakes118.exe windows:5 windows x86 arch:x86
02e04c9a8ff4d398d9ba044eb59173ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rsaenh
CPDecrypt
CPGenKey
kernel32
GetFileType
GetExpandedNameW
FormatMessageA
GetEnvironmentVariableA
GetCurrentProcess
OpenWaitableTimerA
HeapAlloc
GetConsoleTitleA
CreateFileMappingA
GetModuleHandleA
GetShortPathNameA
lstrcmpi
GetProcAddress
SleepEx
Sections
.text Size: 634KB - Virtual size: 633KB
IMAGE_SCN_MEM_EXECUTE
.ydata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_WRITE
.RSRC Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ