Static task
static1
Behavioral task
behavioral1
Sample
2a191a60affe223e982f6e1084814809_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2a191a60affe223e982f6e1084814809_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a191a60affe223e982f6e1084814809_JaffaCakes118
-
Size
33KB
-
MD5
2a191a60affe223e982f6e1084814809
-
SHA1
76615f594e8e085ba497ff74ebf70bfe124862f5
-
SHA256
359a78f5812d41f00ad959dae2c8e79c49b244fd24bfa5816bfe0cc1bd8b9a92
-
SHA512
a9d1ea996651272eff83e2ffdd8d2bd685ef49f87b096bdc798bb5bca20d2f3206c68a9f1cbc76905ca8707ee94895b34cf8767812173bb5c6b503a784999691
-
SSDEEP
768:lNDw7CSYxolKIWkXNqQOy8UMqsoPa7JyTd/N:kBG2XNPofoPaYTd1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a191a60affe223e982f6e1084814809_JaffaCakes118
Files
-
2a191a60affe223e982f6e1084814809_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 22KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE