Static task
static1
Behavioral task
behavioral1
Sample
2c61181b75060fea55eba5782d79a22f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c61181b75060fea55eba5782d79a22f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c61181b75060fea55eba5782d79a22f_JaffaCakes118
-
Size
54KB
-
MD5
2c61181b75060fea55eba5782d79a22f
-
SHA1
a446e453842d81fb7d5aa37539a005a9cddbc87d
-
SHA256
b041977c2697f448ed3f39880a4ffdf1fa5c6a3a7a557445c9cefbbb4fe35bbf
-
SHA512
d7c93247149f9f36a223588f930368d333045c1888f9832170bf36748604572259184b4be8baee23195f7c2ad4e356a9c0b9f55b7e6cd6801309428b92e2785c
-
SSDEEP
768:XevFI1m0on6HGavZUdQffoaFNnioNQpMGdj6IqOq5vpJjGdtRDJiCdByEd3IBNYb:KtV6HGavhgaOjA5DGj28rb07c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c61181b75060fea55eba5782d79a22f_JaffaCakes118
Files
-
2c61181b75060fea55eba5782d79a22f_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ