Static task
static1
Behavioral task
behavioral1
Sample
d49a0c2067dbbefcc4265dd65c7c3b81_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d49a0c2067dbbefcc4265dd65c7c3b81_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d49a0c2067dbbefcc4265dd65c7c3b81_JaffaCakes118
-
Size
28KB
-
MD5
d49a0c2067dbbefcc4265dd65c7c3b81
-
SHA1
cc1d4d7cfbb2297e5791ad5e47797a6968eb270c
-
SHA256
0ea684ac765c7f2e73c5b09c1c59ed3580fccc0c15c47e5998df1a75cf2317d6
-
SHA512
3d22b301bdaf8ae53a1b0f99256b6742a9303251db8cbb9912c5bc5a172df6f0d3f01ac4b0ad8c0677ef008b35f92207a8541c713d7618fc4d9db3cef522322a
-
SSDEEP
384:bmOyMLjKMPH1Dxw7ZA8l9ZoA7k+w9G5hmssR0IkR46nzojn8mgRRtssIeo/r5J1V:WUjKVjl9xw3x6nz7vj1wrld
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d49a0c2067dbbefcc4265dd65c7c3b81_JaffaCakes118
Files
-
d49a0c2067dbbefcc4265dd65c7c3b81_JaffaCakes118.exe windows:4 windows x86 arch:x86
28c6ef1128d2dc0d513ddf64919b7716
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ