Static task
static1
Behavioral task
behavioral1
Sample
2a62a04664aeafe6d3ef938884cfabbc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2a62a04664aeafe6d3ef938884cfabbc_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a62a04664aeafe6d3ef938884cfabbc_JaffaCakes118
-
Size
54KB
-
MD5
2a62a04664aeafe6d3ef938884cfabbc
-
SHA1
00b589276122493f5cf1857005ebdc2d1e0280a3
-
SHA256
3d2de04bab1147b5b8c98b46b20ba8bb137f3f7aadf3cc3e5d9470170fd27c31
-
SHA512
2813ad2c1764eed5af2d25fcd5dd690120db0190de3a1ff2ed9fc67dccfab12f4e5d2701d1b7b84229aec9c38d0b139c2b0c3c2d5a023c9729415ce5f544c6e8
-
SSDEEP
768:fevFI1m0on6HGavZUdQffoaFNnioNQpMGcSyJGlT9ICBZ4dCK3gMrObrzSvWeBLz:itV6HGavhgaPSacGCBZqQcOrzeBa0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a62a04664aeafe6d3ef938884cfabbc_JaffaCakes118
Files
-
2a62a04664aeafe6d3ef938884cfabbc_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ