Static task
static1
Behavioral task
behavioral1
Sample
2caed66b6f96a920ebd5dc3054a1c28f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2caed66b6f96a920ebd5dc3054a1c28f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2caed66b6f96a920ebd5dc3054a1c28f_JaffaCakes118
-
Size
54KB
-
MD5
2caed66b6f96a920ebd5dc3054a1c28f
-
SHA1
15deac08bcf0e6cbea81e697391e039193d12d0d
-
SHA256
fa5fcdd172c43379b62724f99dc66efbe9318d5a84709cb29f434bca0d76e31f
-
SHA512
eba19e765b899115ee5a8f240e5d728e6edca444efcc09e45b58952cdec173f3754b0fa726a2b7eb1bf8b16f21927de9d7698b1a9e4690cfb9cb29f9eb5e7182
-
SSDEEP
768:OevFI1m0on6HGavZUdQffoaFNnioNQpMGdh/LV6unQYOnQTLvEv0OSvW5+:XtV6HGavhgaOaunUovEv0O95+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2caed66b6f96a920ebd5dc3054a1c28f_JaffaCakes118
Files
-
2caed66b6f96a920ebd5dc3054a1c28f_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ