Static task
static1
Behavioral task
behavioral1
Sample
286e782a39c090156fc6e87c45c821b7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
286e782a39c090156fc6e87c45c821b7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
286e782a39c090156fc6e87c45c821b7_JaffaCakes118
-
Size
38KB
-
MD5
286e782a39c090156fc6e87c45c821b7
-
SHA1
48ed9f9cf29540301d731160c2888f3b43d6c297
-
SHA256
e9fcb6a57f19e3ca891b1c54112844c70df0586937395796b3327e0452988309
-
SHA512
d4f48e01fcaf7f44b145c825e48905c2f182c4f60976dea6b7dca0c06aa0cee4da85df8b61dd8b6295ee3124907e86f9c87f56269ec9e3edcb9edeaee9d54023
-
SSDEEP
768:MeLMhlzjRKiQWgdgmWhtaHxNZbR3Xe9lZ3FY0MJGaJxWLoI8:5AzjRpngfsaHv3eJi0MJ2m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 286e782a39c090156fc6e87c45c821b7_JaffaCakes118
Files
-
286e782a39c090156fc6e87c45c821b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE