Static task
static1
Behavioral task
behavioral1
Sample
2de2973e6509d8f71c4dafaa6cad956b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2de2973e6509d8f71c4dafaa6cad956b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2de2973e6509d8f71c4dafaa6cad956b_JaffaCakes118
-
Size
56KB
-
MD5
2de2973e6509d8f71c4dafaa6cad956b
-
SHA1
bf32ef9afcc2a4ad7aec9536cf4215816420a8f7
-
SHA256
ed04bbf7460bb34f10edeaeae1763ed05def9dbc13316725805159184b07118a
-
SHA512
198a956c6fc6a2dd008a5dc0c9393f59d98d4fdde6bd6817f419cb0daef685ba1471a2caf5b1742a782de291afe5dde3688f2087035ff70736bce95c302b7e28
-
SSDEEP
768:levFI4m0on6HGavZUdQffoaFNnioNQpMGuhRY8vDckrR0gz+KjqnOYxwA3eyLt4Z:w8V6HGavhgapbY4cklBOn3SYLt4pSXWV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2de2973e6509d8f71c4dafaa6cad956b_JaffaCakes118
Files
-
2de2973e6509d8f71c4dafaa6cad956b_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ