Static task
static1
Behavioral task
behavioral1
Sample
0669982e01a1c2db188e3db6a4d12bbe_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0669982e01a1c2db188e3db6a4d12bbe_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0669982e01a1c2db188e3db6a4d12bbe_JaffaCakes118
-
Size
58KB
-
MD5
0669982e01a1c2db188e3db6a4d12bbe
-
SHA1
30c6ffc1576b4a79c9fca40d6cc996a74e3a5a74
-
SHA256
d4afb5f61e81d784ad61da8a247a1d88fc204cfe9d9d14fd84993e731f33aab3
-
SHA512
d63fade58583aeef57d8f5055f523d602da08ef3a267fa0827d1505fe359b66a12e6803a0824c0afef347d84cee29da324d77d64712df413a67900b85416765a
-
SSDEEP
768:f7vFI1m0on6HGavZUPQffoaFNnioNQpMGZXlFPVrqX9zm3yr53nm5GMuMQC3aTLQ:LtV6HGavzgamfRK9zm30dnvfM1aHQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0669982e01a1c2db188e3db6a4d12bbe_JaffaCakes118
Files
-
0669982e01a1c2db188e3db6a4d12bbe_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ