Static task
static1
Behavioral task
behavioral1
Sample
bdce82b4679e8490e8c59b9f7a8e8786_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bdce82b4679e8490e8c59b9f7a8e8786_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdce82b4679e8490e8c59b9f7a8e8786_JaffaCakes118
-
Size
30KB
-
MD5
bdce82b4679e8490e8c59b9f7a8e8786
-
SHA1
5243e5fe6b575669645e15362ac244a2b1927186
-
SHA256
cae1fca74a4d9fd78bd8176a4f162b642eb3260eb3f29aa9f061ba21c91d6195
-
SHA512
97476f52a4ab99791c87573c2a5396c6a2a93b3575616a1f1bbe2a767e7e37d1ed79efd9d8b4a00ceab06dfd0ba4f41ca90c7a097f30af2f6c51660f734b5a2a
-
SSDEEP
24:eFGSxvjxeD0Z7IGmB2P7Jijhndpq5vvOBVeEljd6QBe35Vo78kcNK47:ixvdUtG7kjDu2BhD6QBeno78kKD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdce82b4679e8490e8c59b9f7a8e8786_JaffaCakes118
Files
-
bdce82b4679e8490e8c59b9f7a8e8786_JaffaCakes118.exe windows:4 windows x86 arch:x86
397be31eb8e6b110d028a19bfb811644
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
VirtualProtect
GetTickCount
CancelIo
SizeofResource
LockResource
FreeResource
GetCommandLineA
lstrcpyA
lstrlenA
GetShortPathNameA
lstrcatA
GetEnvironmentVariableA
CreateProcessA
ExitProcess
HeapFree
GetProcessHeap
Sections
.text Size: 1024B - Virtual size: 962B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ