Static task
static1
Behavioral task
behavioral1
Sample
2e0d2a7d933f8cf2e12a7474ea33b34c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2e0d2a7d933f8cf2e12a7474ea33b34c_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2e0d2a7d933f8cf2e12a7474ea33b34c_JaffaCakes118
-
Size
276KB
-
MD5
2e0d2a7d933f8cf2e12a7474ea33b34c
-
SHA1
b752679d157abed22682f8db6f4602b217b6da9b
-
SHA256
25cc844696389873f49156e6ddb2a6b1910d5964a8609c2e6fbd929c3eb6777c
-
SHA512
0dffc60cae5c09aa0322704fe2f3b80de676b6f1a2cf632d3fffbd05c19dc0123eab4f1d9e9f83f1f48b60eaf7d1d0a4552a1f7eb35bca4d378998e71f5735ea
-
SSDEEP
6144:tR6wnuiALwj+4DJPg3pUmVMjTNBfL3B1/Pq1eMSc35Ds3dp4:tkaiLwy4DCu5NBl1KRSo5w34
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e0d2a7d933f8cf2e12a7474ea33b34c_JaffaCakes118
Files
-
2e0d2a7d933f8cf2e12a7474ea33b34c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oobgsks9 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
p96hdj98 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ykjv.vri Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
g5kt3ebq Size: - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qvv2v7.t Size: 210KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3ae1kbxv Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ