Static task
static1
Behavioral task
behavioral1
Sample
2340f2ec7644ee6871efec6422b90ee8_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2340f2ec7644ee6871efec6422b90ee8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2340f2ec7644ee6871efec6422b90ee8_JaffaCakes118
-
Size
16KB
-
MD5
2340f2ec7644ee6871efec6422b90ee8
-
SHA1
354ea1bd2808cf667034b88e650a4bdb3184f396
-
SHA256
943d729aa26f8aebbd76ad99f143adc62dd914d36b8f11e68a895730ee387d7c
-
SHA512
c17f73c9c690f1956e69f1fac2c26456d3f34a5f987ff1f1edc30840a605fd1de6669a7502464052eb74e3f78357b1b3e4d830fb18346dbfff2903b9172a6b8f
-
SSDEEP
384:9OPHoOOYwh+cEiRf0ueKSbqlojn7rJv5g7LaFYUs5HzGcd2n0:9mIOMh+5iR6K2qEnfJ5gHaFYHTjdM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2340f2ec7644ee6871efec6422b90ee8_JaffaCakes118
Files
-
2340f2ec7644ee6871efec6422b90ee8_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d870915cd3d95b0df885669e5e74306
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetModuleFileNameW
GetModuleHandleA
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetTickCount
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ