Static task
static1
Behavioral task
behavioral1
Sample
2a5781a0664abe609afc8d9aa31dc4de_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2a5781a0664abe609afc8d9aa31dc4de_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a5781a0664abe609afc8d9aa31dc4de_JaffaCakes118
-
Size
11KB
-
MD5
2a5781a0664abe609afc8d9aa31dc4de
-
SHA1
b97412183e900f611c7c560a0c86e769f880bc8c
-
SHA256
21dea91c7b66d2bec41c9e1a2140369ee7d9ae51cb7e1d80c78517716db09c14
-
SHA512
c0771941eafa8af675322e8cd5babfe5b1ae8398df300d87dc54a70fa93fd6358cd4a5662e11acad9c2486d5b3830bd4888218ad6deecbbf752504b069a838f5
-
SSDEEP
192:AE1jUNbX8+H4/UU3V/vjSarbc+E8cdwEHsF/w+6s:AElUNj8+HjoV/vZ3c+EcEi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a5781a0664abe609afc8d9aa31dc4de_JaffaCakes118
Files
-
2a5781a0664abe609afc8d9aa31dc4de_JaffaCakes118.exe windows:4 windows x86 arch:x86
4095e573fefd7e42df16f37c2ebbc83c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetModuleHandleA
Sleep
VirtualAlloc
VirtualProtect
VirtualUnlock
GetFileSize
Sections
.text Size: 1024B - Virtual size: 622B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ