Static task
static1
Behavioral task
behavioral1
Sample
2172d24ee5a417fafc96447b220e47c8_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2172d24ee5a417fafc96447b220e47c8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2172d24ee5a417fafc96447b220e47c8_JaffaCakes118
-
Size
82KB
-
MD5
2172d24ee5a417fafc96447b220e47c8
-
SHA1
6dc11eb2b0aa03db2c03456b3194f88caa5f21b2
-
SHA256
fc58c16add097cf70783d42064ec9378e6fed5daa3244fcda5bf88cd2ee18891
-
SHA512
bea9494b465c0e3c27c971e9aead23a0ffd78768fe9918a0c630d650d8dbb9c373f1953860a2b468c223722f003df1c2b4bb9c0e92f6ee5b86a5288c17d96008
-
SSDEEP
1536:y6KDqIaiMHQC4DGjP5dEINWu7ajYEYGMe0mN+CkjvHjnyppguRQxg+HdU/cOb:y6KgiCQC4DGTDD5ajYErKmNo7nKpDiti
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2172d24ee5a417fafc96447b220e47c8_JaffaCakes118
Files
-
2172d24ee5a417fafc96447b220e47c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 53KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE