Static task
static1
Behavioral task
behavioral1
Sample
2e14b1cf875e3caf4967b585d1487d60_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
2e14b1cf875e3caf4967b585d1487d60_JaffaCakes118
-
Size
45KB
-
MD5
2e14b1cf875e3caf4967b585d1487d60
-
SHA1
1100ea9fd3adc2a7e0f40f99401d17d8c1867c63
-
SHA256
440205f15b6d9a9bb897b258543f99fde4670501c66a776e503f976a75dfdcb2
-
SHA512
6b14ecb6cf029d6e305ecc27cb27a07b328c4b505c5cad73d729239c2dc434cf69b8fbb894c995d32d582d8e44556439cba22da7078225280b6d12c42592f8d7
-
SSDEEP
768:bJpsddsj1LclSKv3VNJtMNLd29HwR6UQvRhNxEAmdsK2V:bJeddsjVclS03VWNh05UKRJ4yK2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e14b1cf875e3caf4967b585d1487d60_JaffaCakes118
Files
-
2e14b1cf875e3caf4967b585d1487d60_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 33KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE