Static task
static1
Behavioral task
behavioral1
Sample
2e0ed68aea73b69ca1e5ea3995a5afab_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e0ed68aea73b69ca1e5ea3995a5afab_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e0ed68aea73b69ca1e5ea3995a5afab_JaffaCakes118
-
Size
236KB
-
MD5
2e0ed68aea73b69ca1e5ea3995a5afab
-
SHA1
4ffd2a5ee57ccd7bf51c1c666d8a8792b2c1be1f
-
SHA256
af1a1739651914d7ee7a7d993f7c3a78c918df026c89d222d836971876734b86
-
SHA512
b2553e41e3697171c7477236728a8565168e1bfafaf296be3a476ec54eb8786aa2796cc2e5898018bfa38fc1e5286236cae70c53d0266a3441a2607d72332530
-
SSDEEP
3072:2ZU0DkJsOSjeb+90gAESgtyEypDKxj8BPOI5s8Dxnj8BPOI5s8DxoWFCZZyNm94c:2disOSjM8/5yu4G7a4G7vWFWZyU9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e0ed68aea73b69ca1e5ea3995a5afab_JaffaCakes118
Files
-
2e0ed68aea73b69ca1e5ea3995a5afab_JaffaCakes118.exe windows:4 windows x86 arch:x86
6e1f282449492d5fc7a87e6f1c3ced5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualFree
VirtualProtect
GetModuleFileNameA
VirtualAlloc
user32
wsprintfA
MessageBoxA
Sections
.data Size: 90KB - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_rsc Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ