Static task
static1
Behavioral task
behavioral1
Sample
2fda761720dd01b3c547e92a4b687109_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2fda761720dd01b3c547e92a4b687109_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2fda761720dd01b3c547e92a4b687109_JaffaCakes118
-
Size
17KB
-
MD5
2fda761720dd01b3c547e92a4b687109
-
SHA1
e764245635841b70b6ac1ad4ca696260c7b19a75
-
SHA256
1895c5235e1c7f13bb67244ef5dcc7440079a2f9ddd4e47a27a89de5a21a6f87
-
SHA512
0f254e2c057253ac0dfbc66a60b31cc684def2525cc8cde525265a6f4049d7deb61a65bace82f617db995dde907f9e10dc2e31fd4ef9b0f16884645040be242c
-
SSDEEP
192:0jgA5r8RORfEvHLjyBNiKG5leMRhfvoRurYqRl05e5SgH0qvfF6VAVZvvYQiv0/0:0MAYORfm385JOJBYELHHFwqZ3fs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fda761720dd01b3c547e92a4b687109_JaffaCakes118
Files
-
2fda761720dd01b3c547e92a4b687109_JaffaCakes118.exe windows:5 windows x86 arch:x86
db3aff9c104148a2e7544e6d8b4565be
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetEnvironmentVariableA
CreateFileA
GetProcessHeap
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
advapi32
RegOpenKeyExW
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ