Static task
static1
Behavioral task
behavioral1
Sample
2aaa1b1c7e40b25c907649d469882e11_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2aaa1b1c7e40b25c907649d469882e11_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2aaa1b1c7e40b25c907649d469882e11_JaffaCakes118
-
Size
280KB
-
MD5
2aaa1b1c7e40b25c907649d469882e11
-
SHA1
a0d3eeb961a3c8d978c2e169e7fc7e6101ca668d
-
SHA256
45e7d7e2facd4031963d448bdbcb66c41038eaf5eff0c450ea1c654390c09392
-
SHA512
c743a5cb8db9ad4e6d3a456b7ac8b9157af55fc6cd696d58d72460161fed737aa75ca98e1c42df102de1d89196542124328f9577c0e86994aab596bbb830d1c3
-
SSDEEP
6144:VhveMq2r+7wbup73ozOCx3vp25G3BqwxgGfR+3qFQ:VteMqlEup73o6c3vp25vGfM6FQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2aaa1b1c7e40b25c907649d469882e11_JaffaCakes118
Files
-
2aaa1b1c7e40b25c907649d469882e11_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd227ba966c127e93fe82f25f211eaca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree
user32
wsprintfA
MessageBoxA
Sections
.data Size: 249KB - Virtual size: 852KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_rsc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ