Static task
static1
Behavioral task
behavioral1
Sample
2a243c98b752d268c9b82320c11ceb09_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2a243c98b752d268c9b82320c11ceb09_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a243c98b752d268c9b82320c11ceb09_JaffaCakes118
-
Size
59KB
-
MD5
2a243c98b752d268c9b82320c11ceb09
-
SHA1
555091d37c5b5d1bf757c4d8c2bcad6b15cba8f5
-
SHA256
c71c1bf32d883c9b6c56ababb050faf8b74715f43ebb1ec3c829cca6ab65d464
-
SHA512
084b67ce9a6b08890695b8f3ee827d59a7ad2dbf07611daefc56c43afb19cb4e80008d553eb8d89d9ac31b59475c74d73639494c67700aa21ebf9a904a2d73fc
-
SSDEEP
768:PmZReZKeR4gyGQZ88YZr9xkLsd4aEiwgA31Nv9b4kmVFYbW:Pma/2V0xH4aE+q7Uk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a243c98b752d268c9b82320c11ceb09_JaffaCakes118
Files
-
2a243c98b752d268c9b82320c11ceb09_JaffaCakes118.exe windows:13785 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
zzaribyq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
abijrazy Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iyaibyqy Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ajqiaqjj Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ