Static task
static1
Behavioral task
behavioral1
Sample
527774af95d55daba56a2c9523a91c80_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
527774af95d55daba56a2c9523a91c80_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
527774af95d55daba56a2c9523a91c80_JaffaCakes118
-
Size
54KB
-
MD5
527774af95d55daba56a2c9523a91c80
-
SHA1
dabe8d4e810e2fef963596f21d17c4bfeb173cc9
-
SHA256
15543ab4118b02fc814c74c6731f75b1400cf9a8b19fef1c79b0c0fa80370887
-
SHA512
2a1e9c9b5b1b2835ca260138bebc6062c84f799870091263edefe6679f4d032f3b236d94c472587ef15eb6b27e3a9b427fce08ab38db80fe90fe9ecf31805148
-
SSDEEP
1536:qtV6HGavhga/YXp8eqDoLixmYi2Vqdk2qEcn:qtVqnvzYXp8hEixmJGqd7qhn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 527774af95d55daba56a2c9523a91c80_JaffaCakes118
Files
-
527774af95d55daba56a2c9523a91c80_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ