Static task
static1
Behavioral task
behavioral1
Sample
2c588f5d9315f50e41ef787f005d9b5d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2c588f5d9315f50e41ef787f005d9b5d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2c588f5d9315f50e41ef787f005d9b5d_JaffaCakes118
-
Size
12KB
-
MD5
2c588f5d9315f50e41ef787f005d9b5d
-
SHA1
78807d070bf8c3ed1aac22f3c6f2cb36edab829c
-
SHA256
2d54c66feb67885e212b1d69f02835f7503de479cc44f2a6fed239e6a8f9f26d
-
SHA512
8b19e1a60f2905d8e748166302cf8c006b9a546112f0baf660783579f307556c53bb79337ffba442b176a4bc87fb2717c01ea708646a35fa2a02d80944593272
-
SSDEEP
48:6KDP9BiFTDGlsT6X8RFgB6IZTx20Jw1+sbhLCLGC3zqJJh8GIqI4M/qMBq:x8FysT9F5IZ9DJ4r9+V3zq/w4cqMQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c588f5d9315f50e41ef787f005d9b5d_JaffaCakes118
Files
-
2c588f5d9315f50e41ef787f005d9b5d_JaffaCakes118.exe windows:4 windows x86 arch:x86
1b1d083291417e9b2ed712a577a01f1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassLongA
DestroyWindow
kernel32
GetLastError
SleepEx
Sleep
CreateThread
ExitProcess
QueueUserAPC
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ