Static task
static1
Behavioral task
behavioral1
Sample
2960e531367e74ec0f7cd758f6368aa9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2960e531367e74ec0f7cd758f6368aa9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2960e531367e74ec0f7cd758f6368aa9_JaffaCakes118
-
Size
32KB
-
MD5
2960e531367e74ec0f7cd758f6368aa9
-
SHA1
55b33bea2fba860a6cb777a24adbfe0d8ebfb066
-
SHA256
1112f1fba286bf3ff1540e046548a84cf292b01a847414d15ba21ff7ba9f7539
-
SHA512
01dba185203b8695d58a6f3c5329375212c6722d874bd4a3c204ad31f21136181161990c6da36071cc2016268b2cc7201677247784bc36b185b54ee55f54e3ce
-
SSDEEP
768:IMX78Lrt589GyeXD3TrWMeun88+iIkKIk7X9XoOVI66:IQ78ft5UG9p88pIBIk7X9XvIV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2960e531367e74ec0f7cd758f6368aa9_JaffaCakes118
Files
-
2960e531367e74ec0f7cd758f6368aa9_JaffaCakes118.exe windows:4 windows x86 arch:x86
c2ec2b2f10d52cf707d44ef84432409d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryA
VirtualProtect
CloseHandle
GetFileSize
CreateFileA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
GetModuleFileNameA
GetModuleHandleA
user32
wsprintfA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE