Static task
static1
Behavioral task
behavioral1
Sample
266080d19ed9783900cb86617df14378_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
266080d19ed9783900cb86617df14378_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
266080d19ed9783900cb86617df14378_JaffaCakes118
-
Size
58KB
-
MD5
266080d19ed9783900cb86617df14378
-
SHA1
2d4b2f98e1add865648d97c1d6439a149a15af0c
-
SHA256
5794cbbd1f3209d0aa1134fe1f73ecdc39008b5e3d939b7a75042679aacfdfab
-
SHA512
53f83182ada72ec6d5a57646d7a2b73fd08c0725bac0ff89ccf4deb6776e537861c59e00d671c1ceb43f42bab87b665bfa661b412a1dea727b1318a21e10b1da
-
SSDEEP
768:fevFI1m0on6HGavZUPQffoaFNnio2QpMGZXlFPVrqX9zm3yr53nm5GMuMQC3aTN:itV6HGavzgajfRK9zm30dnvfM1ax
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 266080d19ed9783900cb86617df14378_JaffaCakes118
Files
-
266080d19ed9783900cb86617df14378_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ