Static task
static1
Behavioral task
behavioral1
Sample
2c816a0a2142f157283cffd40abfdc00_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2c816a0a2142f157283cffd40abfdc00_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2c816a0a2142f157283cffd40abfdc00_JaffaCakes118
-
Size
28KB
-
MD5
2c816a0a2142f157283cffd40abfdc00
-
SHA1
1dae19f0b6d2fb4d0c9fac5d064aa1a6dda3c832
-
SHA256
6e8275b5c82a7fc3bef8712a1cc5b94cf00a6d2f4e1c93aebb05c5129254ee7d
-
SHA512
5c6c2bd68446b17a21b9358974c9174f7f970e4f87571b1dc13323ab68a8f7742f404698bc3ace81d584c9a86605a83f7b7beb1d3e4e371215aa482f2c98112c
-
SSDEEP
768:RnGIZtVBmRDDU+RwoNTdDcRsfrTnlKsepfY4Wmsd:l3ZtLmRvRtd1cIngs6fYnd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c816a0a2142f157283cffd40abfdc00_JaffaCakes118
Files
-
2c816a0a2142f157283cffd40abfdc00_JaffaCakes118.exe windows:4 windows x86 arch:x86
28c6ef1128d2dc0d513ddf64919b7716
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE