Static task
static1
Behavioral task
behavioral1
Sample
ea92469d63ac85058318e4318a4493b0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea92469d63ac85058318e4318a4493b0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea92469d63ac85058318e4318a4493b0_JaffaCakes118
-
Size
54KB
-
MD5
ea92469d63ac85058318e4318a4493b0
-
SHA1
8ea66233534eb35818ec70ca2ae602aa5d5faf38
-
SHA256
0e88cf9beb7ba9ef37f4a959c6d4cd1892d4b3f95ad73848f7ab3728b9ab54af
-
SHA512
3f3f03753545eb16c6d365762d6512ace2b963ab9002a4bbf8edda6c2ea806b1c280237fcf2c6a2d078aa46c30904ac446ce9c22db499c8205c56f1dc99659da
-
SSDEEP
768:lMvFIYm0on6HGavZRTQffoaFNHio0QpEGxi2vM+Fb2xQWBkmdfNhan5F0eYhxA9a:2cV6HGavEgadg+FOnB51ha5FSkNDu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea92469d63ac85058318e4318a4493b0_JaffaCakes118
Files
-
ea92469d63ac85058318e4318a4493b0_JaffaCakes118.exe windows:6 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ