Static task
static1
Behavioral task
behavioral1
Sample
1632e7e456294aa2424b974fa779e171_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1632e7e456294aa2424b974fa779e171_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1632e7e456294aa2424b974fa779e171_JaffaCakes118
-
Size
54KB
-
MD5
1632e7e456294aa2424b974fa779e171
-
SHA1
0379f28e9ff1879c3210097a41c255142d0f490a
-
SHA256
c8ebefe38b858a6bd393eda7c1e6b8f2f5999dabd8780f9ee81591f8a92c0a28
-
SHA512
7ba0d209427753cab712b4e066b0d6220773dc59b9ca6327e174b9e86bcfa64ef4b7917ff004cc8f2b36726500c32ceaaaf5eca87eba5dde394adb0de6a99d31
-
SSDEEP
768:revFI1m0on6HGavZUdQffoaFNnioNQpMGdUF+0oRqoIRjaKS7g8GaMKCwOlLxntT:GtV6HGavhgaOUF+0vmN1MlxCz3+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1632e7e456294aa2424b974fa779e171_JaffaCakes118
Files
-
1632e7e456294aa2424b974fa779e171_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ