Static task
static1
Behavioral task
behavioral1
Sample
2237f54cfb163b066c77e959d0204d92_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2237f54cfb163b066c77e959d0204d92_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2237f54cfb163b066c77e959d0204d92_JaffaCakes118
-
Size
302KB
-
MD5
2237f54cfb163b066c77e959d0204d92
-
SHA1
3736f69edb5bbf39b324829d194e7c5649da3956
-
SHA256
900f3c6e0c6bd65a05ceb74a38173e1cfa292670d416cf293de61230909a7b55
-
SHA512
4b888a1965da31dc0dc9fc258ddfd8ab61351be0aa45a9ab580176242eddea0e5112e2645fa065d2df0f4a4e6579db768cd606c3c2523ac3c0b61f295c2d39da
-
SSDEEP
6144:xKteDWh7CIpGWftOGaykngc5vFDx3cfRy39tmOt26l7gI1pTuzGr+N1LDpt:xBhGFftIykgc5Afwtt99BgI1pTkxX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2237f54cfb163b066c77e959d0204d92_JaffaCakes118
Files
-
2237f54cfb163b066c77e959d0204d92_JaffaCakes118.exe windows:4 windows x86 arch:x86
e27d2e860b3f8e2a0fcc19aadb2f0a4f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetSystemTimeAsFileTime
Sections
1 Size: - Virtual size: 62KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE