Static task
static1
Behavioral task
behavioral1
Sample
2e6d35741b72d190847e1463be384198_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2e6d35741b72d190847e1463be384198_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e6d35741b72d190847e1463be384198_JaffaCakes118
-
Size
56KB
-
MD5
2e6d35741b72d190847e1463be384198
-
SHA1
2ce5193a3ebe739de55b78b9627b12436c4fc1fd
-
SHA256
9cf25b6a5061db5d8b9c90115a5c9ee896a59210f26b6dd3dc079cc1ad4bf158
-
SHA512
4a97f309dcb7e11086549b7106f871bb08e43c72ee2acf33b5dc49984fef5ee6eb1379f4633a1d226655d1b8d729b5d0109f93338f2a74093f16bc2a957955a6
-
SSDEEP
768:levFI4m0on6HGavZUdQffoaFNnioNQpMGuhRY8vDckrR0gz+KjqnOYxwA3eyLt4F:w8V6HGavhgapbY4cklBOn3SYLt4pSXil
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e6d35741b72d190847e1463be384198_JaffaCakes118
Files
-
2e6d35741b72d190847e1463be384198_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ