Static task
static1
Behavioral task
behavioral1
Sample
2868292e8b1592748777abbf54e65cee_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2868292e8b1592748777abbf54e65cee_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2868292e8b1592748777abbf54e65cee_JaffaCakes118
-
Size
100KB
-
MD5
2868292e8b1592748777abbf54e65cee
-
SHA1
26e95d0c36822062984e77731faef63eff9911a5
-
SHA256
6dfda2f5aab5c046d61165b3c217645066eb425fa402c51b505f1f212887275b
-
SHA512
98998f3f6f7be0052410e942a600c5bb9cbf936ecb3d02403e809fd39190a6ada82cee2c7c2a7d14fd7a5d2d4161629a26d5e4030bfcc4426e5ee21560310d92
-
SSDEEP
3072:2gMKPLuXOrUhkU6U38DP53Cr2sJwUNzaRv:VMYy+rUh8cKCwZv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2868292e8b1592748777abbf54e65cee_JaffaCakes118
Files
-
2868292e8b1592748777abbf54e65cee_JaffaCakes118.exe windows:4 windows x86 arch:x86
28f6b7bac2758f1fa53c5fd56c2204b0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetSystemTimeAdjustment
Process32First
SetTapeParameters
HeapFree
GetConsoleCursorMode
DeleteTimerQueueTimer
ExpandEnvironmentStringsA
SetEndOfFile
CreateJobObjectA
SetFileApisToOEM
GetConsoleCommandHistoryLengthA
GetProcessWorkingSetSize
GetProfileIntA
ExitProcess
GetStartupInfoA
Sections
CODE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pack329 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE