Static task
static1
Behavioral task
behavioral1
Sample
2116d71e88ced26d4edb818ebd30d934_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2116d71e88ced26d4edb818ebd30d934_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2116d71e88ced26d4edb818ebd30d934_JaffaCakes118
-
Size
213KB
-
MD5
2116d71e88ced26d4edb818ebd30d934
-
SHA1
961c0e6668e6465b5e438c823a9a286b5cbfa4f6
-
SHA256
a6ad9566c639aab349ad98b8f47e891b0b7c5a7b5fea28063f04d5adff6d7943
-
SHA512
0f5a1290551c3cc3fbd6862afb2812f14932ee29c61061ffc7ed085581fb7439a4dd5649dd41978b2c8c7013be053e86b733c3229fa1cd04932a5110115d5803
-
SSDEEP
6144:ouKfKi1Z41x8dQ4LfP9NHGNc9Sccn8hqV3o1482D/6S:oJCi1Zue3LfPYc9ScuV3VDX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2116d71e88ced26d4edb818ebd30d934_JaffaCakes118
Files
-
2116d71e88ced26d4edb818ebd30d934_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
Size: 201KB - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.depack Size: 361B - Virtual size: 424KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE