Static task
static1
Behavioral task
behavioral1
Sample
2675dd75555aa0245036cd7ad3a26db5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2675dd75555aa0245036cd7ad3a26db5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2675dd75555aa0245036cd7ad3a26db5_JaffaCakes118
-
Size
30KB
-
MD5
2675dd75555aa0245036cd7ad3a26db5
-
SHA1
bfc9bd8cb80eef4dde1d57e3a56963f977ed3158
-
SHA256
e044c662d4857d99f84ab7e329d2fd0a0758bbdb1c6778661f21bea7c7557da4
-
SHA512
fefcf18a7c5f888063241872ffbeb684c58bb4a4ad4ca9d8a4486c0bec79e4a750ae65dfbc7df111ece0586a2da3ab4328f406420e0629012f935d897cb3826b
-
SSDEEP
768:iAcE0DDe5bvJcS3F+5uzToKfrDfIl4pd/Qj:iAc/DDeV+54oKDDf+qdIj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2675dd75555aa0245036cd7ad3a26db5_JaffaCakes118
Files
-
2675dd75555aa0245036cd7ad3a26db5_JaffaCakes118.exe windows:4 windows x86 arch:x86
5c0bb5621467d77325ec6f1af8f94b7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
wsprintfA
advapi32
RegSetValueExA
shell32
CommandLineToArgvW
ole32
CoInitialize
oleaut32
VariantClear
msvcrt
memcmp
wininet
FindFirstUrlCacheEntryA
psapi
GetModuleFileNameExA
netapi32
Netbios
Sections
.text Size: 16KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE