Static task
static1
Behavioral task
behavioral1
Sample
2aeeac3841ec98cfdf2fdb8bf72e2751_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2aeeac3841ec98cfdf2fdb8bf72e2751_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2aeeac3841ec98cfdf2fdb8bf72e2751_JaffaCakes118
-
Size
144KB
-
MD5
2aeeac3841ec98cfdf2fdb8bf72e2751
-
SHA1
c0479254e2d724a3ebc07e0f36bbba72c5bd8cc3
-
SHA256
d8c3adbf663b628222d6a6bd243e0d75739517ce3fa25dc5573fedd29efca06a
-
SHA512
69beb3d4ba47932dc69cf72bdcfc1542cb77c15f3dd73467d2da7fc1ec2b3f4275db3f15b109627181b168e211ce4829929ae3b12a0dc647203e46532091725a
-
SSDEEP
3072:UKBUvzW+HVFR438WJd1iZ3ZTIYK6SXvUdyWvEztDix9V:UmuVFIPIg6SXvUdNWAx/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2aeeac3841ec98cfdf2fdb8bf72e2751_JaffaCakes118
Files
-
2aeeac3841ec98cfdf2fdb8bf72e2751_JaffaCakes118.exe windows:4 windows x86 arch:x86
559398b1246f3c18c513f21a971018a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetVersionExA
GetModuleFileNameA
WaitForSingleObject
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualAllocEx
ReadProcessMemory
GetThreadContext
CreateProcessA
user32
CharLowerA
msvcrt
malloc
strstr
free
fclose
_filbuf
ftell
fseek
fopen
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE