Static task
static1
Behavioral task
behavioral1
Sample
26431d420a31fdfeae8a40d362ae6542_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
26431d420a31fdfeae8a40d362ae6542_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
26431d420a31fdfeae8a40d362ae6542_JaffaCakes118
-
Size
296KB
-
MD5
26431d420a31fdfeae8a40d362ae6542
-
SHA1
dace98e66c24e423652fdbba727b0e4bf8dc4754
-
SHA256
ddbcd88e7e4e467a791ecac32533503326635d3f25451790b367e4c44e28cbe8
-
SHA512
00740e9e115a00a30c7975326f7d62666a1399388f255b056bfd2432c4d84303b872fffa89aae554fbc3381dbc183e5169bf90bb8b6ae053a59714d83160a462
-
SSDEEP
6144:9hWlu7swQ+yXZL/MQiXjhevC7zpfO9CXogdqy7iNJQpnDBfO:N7swQhBkQiXjh8C3pfrQykInlO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26431d420a31fdfeae8a40d362ae6542_JaffaCakes118
Files
-
26431d420a31fdfeae8a40d362ae6542_JaffaCakes118.exe windows:4 windows x86 arch:x86
85ee866cabbc8b0c01b311ebfac6a076
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetOEMCP
VirtualAlloc
LoadLibraryExA
ExitThread
GetCommandLineA
GetLastError
GetProcAddress
GetACP
IsBadReadPtr
lstrlenW
ExitProcess
GetCommandLineW
Sections
CODE Size: 280KB - Virtual size: 279KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ