Static task
static1
Behavioral task
behavioral1
Sample
2ac6561e9fd655904785d8f23bf17b2a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2ac6561e9fd655904785d8f23bf17b2a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ac6561e9fd655904785d8f23bf17b2a_JaffaCakes118
-
Size
126KB
-
MD5
2ac6561e9fd655904785d8f23bf17b2a
-
SHA1
92307306e68afc0bb6a757c80cd5367e51e88efc
-
SHA256
273ff58774e802fd69492624b27716b6d5d2dbbf6d5818328e0a8024b78717ce
-
SHA512
1e7f03c7d095c14402a089c06441f11e3727a5adf02683b3d0834d0287648b901e5793d98d499917f74ce2bf33b622dcd261de45bc1c5b4e25ad7f9e7fcd443d
-
SSDEEP
3072:ulGi83JvtdpDNseIZOw+rCTPJSglQnxCkUktzBLxkqoLYRLE:u183NLpGJvTPLlcxCkdtLzRQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ac6561e9fd655904785d8f23bf17b2a_JaffaCakes118
Files
-
2ac6561e9fd655904785d8f23bf17b2a_JaffaCakes118.exe windows:1 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 113KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE