Static task
static1
Behavioral task
behavioral1
Sample
2d6900d2e7556e2c9b99c0d7b5480a03_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d6900d2e7556e2c9b99c0d7b5480a03_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d6900d2e7556e2c9b99c0d7b5480a03_JaffaCakes118
-
Size
54KB
-
MD5
2d6900d2e7556e2c9b99c0d7b5480a03
-
SHA1
fca3bbab25f0355d555a1cbacf93468895a52b87
-
SHA256
6021ac0faad91af0e7a6d1322364c2215ae0b5295ec1bedbc183d9194e31d23d
-
SHA512
e62fac76f13e69961577a63208c2e1c771939c3bfd53d73c5198da5920532217797d3e461a71b6d4b7afb4d073532d56c6c9d6c22bb25230d75c209ac8b38758
-
SSDEEP
768:9evFIYm0on6HGavZUdQffoaFNnioNQpMGYZH4zJrCn3HkZZoq3z/zj7vS0xLehG8:YcV6HGavhgaTAJ2nUZ5fP+f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d6900d2e7556e2c9b99c0d7b5480a03_JaffaCakes118
Files
-
2d6900d2e7556e2c9b99c0d7b5480a03_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ