Static task
static1
Behavioral task
behavioral1
Sample
2274eed8faf55f49f555820607459acb_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2274eed8faf55f49f555820607459acb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2274eed8faf55f49f555820607459acb_JaffaCakes118
-
Size
123KB
-
MD5
2274eed8faf55f49f555820607459acb
-
SHA1
9ae26f73bdce872d4ce1c33808ef0d4bf71d4755
-
SHA256
c6c1ed32be48c81fcc426a689f3a2cf484af5cd8e35608dbc5ab83d011667c3c
-
SHA512
f81d9236fd9850477166683c0120afadeb08ebffe7a92de24289b71ef79187f660b1b9eb96c4bdc18ecddc88c34a577e3641955fbec8552fa810010daaf807fd
-
SSDEEP
3072:Z50hUADe66YeiPIAwGdA7ExWkKREjUlTEXfgQ11pF3ZjlV/y/:2BH63OIZoUUl80yIJ1phZjlV/o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2274eed8faf55f49f555820607459acb_JaffaCakes118
Files
-
2274eed8faf55f49f555820607459acb_JaffaCakes118.exe windows:4 windows x86 arch:x86
17bd9ccd9d97d56576c31ffcf1ccae69
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFiberEx
CancelWaitableTimer
GetAtomNameA
GetCalendarInfoA
CreateFileMappingA
QueryInformationJobObject
HeapSetInformation
GetVolumePathNameW
GetProfileIntW
GetFileAttributesA
MoveFileW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 108KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE