Static task
static1
Behavioral task
behavioral1
Sample
ce3d685681e1acd43ccac9c37d36dfef_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce3d685681e1acd43ccac9c37d36dfef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce3d685681e1acd43ccac9c37d36dfef_JaffaCakes118
-
Size
37KB
-
MD5
ce3d685681e1acd43ccac9c37d36dfef
-
SHA1
28ba51508ec8cdeb3261515cf5bbcd1cf58ee32c
-
SHA256
18db9561d7d471c215638446fcae9c9bad2c513112232627565f450a4e5fcd64
-
SHA512
44893663b46441437dd94c82d558611564b23e0657e9088976d316d5760313304f18f7217a8c72c47b1b32589cb9979e5528b44f5312a3c071a023ad2d64ee30
-
SSDEEP
768:aQMvFIYm0on6HmavZxTQffoaFNHioUQpkGH7vHe:UcV6Hmavkgan+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce3d685681e1acd43ccac9c37d36dfef_JaffaCakes118
Files
-
ce3d685681e1acd43ccac9c37d36dfef_JaffaCakes118.exe windows:6 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.data Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 3KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE