Static task
static1
Behavioral task
behavioral1
Sample
2deae1ace00bd25c3a0ef4850cbe1b3d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2deae1ace00bd25c3a0ef4850cbe1b3d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2deae1ace00bd25c3a0ef4850cbe1b3d_JaffaCakes118
-
Size
3.0MB
-
MD5
2deae1ace00bd25c3a0ef4850cbe1b3d
-
SHA1
f9e7fefd09d27127b10a5eb6d438df0a092598a3
-
SHA256
ed8d4c561ee47491d028514ad28d03a9ec5305b5521a9ed89018eaf990a1f4bb
-
SHA512
686d2df98535e2c78345ee50c84e0683eb4370818305511f2a23a2f1b430a6d372e089b531bce1f602bb99348440e2ea9e324d64119908132a4037d7072e4b65
-
SSDEEP
24576:wRLMuONNejfNj27GQeYitllZcJr49sXu:eLMpz2/cpe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2deae1ace00bd25c3a0ef4850cbe1b3d_JaffaCakes118
Files
-
2deae1ace00bd25c3a0ef4850cbe1b3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
ca75ba60e028d4702f7e0075b5d4d619
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
ExitProcess
VirtualProtect
advapi32
RegOpenKeyA
ialib
F0
msvbvm60
__vbaVarTstGt
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.section Size: 148KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE