Static task
static1
Behavioral task
behavioral1
Sample
2ca2526a598bf58e5c085dbadf593420_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2ca2526a598bf58e5c085dbadf593420_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2ca2526a598bf58e5c085dbadf593420_JaffaCakes118
-
Size
22KB
-
MD5
2ca2526a598bf58e5c085dbadf593420
-
SHA1
5e95664437e7cc391f7b87b6bff36e4aa43c9fa2
-
SHA256
db30fef0ba1707e0c95d836cd9fbe3442d10a6fc799a3d654d2d56cf018811ec
-
SHA512
8b4da2082a8b09540a7000ac5e4aa9e0c955df81f1f442c2503d5a5d46220bf98234afdf845f69fcea8645a6b5f63db7f3a121115171e81fa3fb1fe54ef09862
-
SSDEEP
384:xtTusCqyaEvH8cpSv30mICZeVyjTdsXvdH6dYFujDivRWmaF:xVjyaa3Yv3HIgl0vdaQMiZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ca2526a598bf58e5c085dbadf593420_JaffaCakes118
Files
-
2ca2526a598bf58e5c085dbadf593420_JaffaCakes118.exe windows:4 windows x86 arch:x86
35347c755519b7d0311887e16c6cc7d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHAddToRecentDocs
StrRChrIA
StrStrIA
kernel32
CreatePipe
TerminateProcess
VirtualProtect
Sections
.text Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ