Static task
static1
Behavioral task
behavioral1
Sample
1938a1c40cbdf14dd5203948b0f5b8a5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1938a1c40cbdf14dd5203948b0f5b8a5_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1938a1c40cbdf14dd5203948b0f5b8a5_JaffaCakes118
-
Size
56KB
-
MD5
1938a1c40cbdf14dd5203948b0f5b8a5
-
SHA1
ffd9854a09259cb01bbf5b8ec23e8b8e63af14b1
-
SHA256
06c0b288c5572c1265ce447a7096e3d1b536c74769344dcee6014cd29fd118df
-
SHA512
c09a8fbc01db3ee91f2644020010d649df4617cba3c0db75606e87e69e238815886a246564fe455c5d73243136882341e94ff1571340a795072d2037b7d7104a
-
SSDEEP
768:levFo4m0on6HGavZUFQffoaFNnioNQpMG0hRY8vDckrR0gz+KjqnOYxwA3eyLt4m:wcV6HGavJganbY4cklBOn3SYLt4pSXiG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1938a1c40cbdf14dd5203948b0f5b8a5_JaffaCakes118
Files
-
1938a1c40cbdf14dd5203948b0f5b8a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ