Static task
static1
Behavioral task
behavioral1
Sample
692846d46502ef864159a0cf3697b7c3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
692846d46502ef864159a0cf3697b7c3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
692846d46502ef864159a0cf3697b7c3_JaffaCakes118
-
Size
82KB
-
MD5
692846d46502ef864159a0cf3697b7c3
-
SHA1
8caa37486884075b73246cb5e175793cc297a59d
-
SHA256
546a74a4f0f3ae8b339e11f1cba8bfcbaf6bef5832e67ee3ab03baa969c90a8d
-
SHA512
962efc87dcc3bf686a26791861b3d12f0669abac806e88e6732cf8e805658672ad4bdf471a0ae0f694f00d00ea93e450685f6328dac127ab5fc8017b8f97f4f8
-
SSDEEP
1536:itV6HGavzga2fRK9zm30dnvfM1aPdOTssRS//kAvGL9vcHzCE:itVqnv4fcCk1OpybvGLhcTCE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 692846d46502ef864159a0cf3697b7c3_JaffaCakes118
Files
-
692846d46502ef864159a0cf3697b7c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ