Static task
static1
Behavioral task
behavioral1
Sample
e1d5433d1de82a580008ec59733534b5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1d5433d1de82a580008ec59733534b5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1d5433d1de82a580008ec59733534b5_JaffaCakes118
-
Size
54KB
-
MD5
e1d5433d1de82a580008ec59733534b5
-
SHA1
b038acd5213a7e6bccbe709cb0f5487eda6ccfa5
-
SHA256
68adeafc4dd468dc196d8970ba612d7957ac34c8f0ca729fd3e076625b7230de
-
SHA512
58015e3d79aed2014299be1b3a575e195f440054a8a19d1fc500e7321cfba7cd7626593adaaf49d2edba75c39e50ae1889386ca07f9d38dcd12d7f08e3151e06
-
SSDEEP
768:NMvFIYm0on6HGavZRTQffoaFNHio0QpEGkkIPtf4Xv9L26M0z0dR+QWl1DqOiqBI:ucV6HGavEgajgtfogRAllqF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1d5433d1de82a580008ec59733534b5_JaffaCakes118
Files
-
e1d5433d1de82a580008ec59733534b5_JaffaCakes118.exe windows:6 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ