Static task
static1
Behavioral task
behavioral1
Sample
2e36e46ace66915b7e14fd5e623064c8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e36e46ace66915b7e14fd5e623064c8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2e36e46ace66915b7e14fd5e623064c8_JaffaCakes118
-
Size
124KB
-
MD5
2e36e46ace66915b7e14fd5e623064c8
-
SHA1
6067083e8246648a7ef099596eb1b5cbd89ff357
-
SHA256
e5eedc890041b6d3f4b9135f6a7009acb9f9228660050cda837d3424bac640a6
-
SHA512
cdd24e9a3d0aa07b3fdcfdb6f6cb845e056c3fe485f7c13a4f0fce53fd365f8088da4b20019cd1e064aacf4eb62e46669b870b33a382b155d43d545f359e4920
-
SSDEEP
3072:J0rrQqRFsmRc1ZH1ENzZke/zYmk7H5T1EDKq997q:K941ZVEFZPkbADKq3e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e36e46ace66915b7e14fd5e623064c8_JaffaCakes118
Files
-
2e36e46ace66915b7e14fd5e623064c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
b11eb5707d7109e22c62c437df1249ba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleInputExeNameA
MoveFileExA
GetCompressedFileSizeA
IsValidLocale
ConsoleMenuControl
GetLongPathNameA
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
rc60 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rc61 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rc62 Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rc63 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ