Static task
static1
Behavioral task
behavioral1
Sample
2a65e14a5dc5435375d70d9ea7e3b905_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2a65e14a5dc5435375d70d9ea7e3b905_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a65e14a5dc5435375d70d9ea7e3b905_JaffaCakes118
-
Size
56KB
-
MD5
2a65e14a5dc5435375d70d9ea7e3b905
-
SHA1
9ccd6a4f2b1a97da7e68b00e3fb743658fd30201
-
SHA256
4391d7a0b49336cff9ed02aa92432cc9f8fa5bf7e23d9eceecf10a8b2ffeb860
-
SHA512
69873f7054f7dc6556faf02a324d8112983e9ed685058fe37b4e99028d40b087a3dad062120cbcaeb7900e42cadce041dfdaf79f39657a5e5a9b980028b0ed33
-
SSDEEP
768:k8rdAKjyCd/sAcjg2Vu5QCdSbrv/OgkWaMs//xBNLozRjj28DF2Er205zBOoefjm:hpAKjyClxcU20SbuMg5BNLmjPh2EK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a65e14a5dc5435375d70d9ea7e3b905_JaffaCakes118
Files
-
2a65e14a5dc5435375d70d9ea7e3b905_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
MAZE Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MAZE Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MAZE Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MAZE Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE