Static task
static1
Behavioral task
behavioral1
Sample
2afb51fae9b8b5c11d14a6f9ccbba36c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2afb51fae9b8b5c11d14a6f9ccbba36c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2afb51fae9b8b5c11d14a6f9ccbba36c_JaffaCakes118
-
Size
25KB
-
MD5
2afb51fae9b8b5c11d14a6f9ccbba36c
-
SHA1
0fd3e20d2376ed777d4c35693c7116eaaf20c080
-
SHA256
3682d86519cbd9aaed7c1025069b6fe3cae493ef4235d7c6f3df8a07ad2e1c92
-
SHA512
b2ad2d460cc47222257e6a356eccd82c7df2a3432e04c66f5988a349a4fcd69d7fe1d5e0d81a6a734a88fe3a5d83c53b436c810a37b5b813d6dbb38fa82b7089
-
SSDEEP
384:EZNnn5Htmd5/qCz0mtMg9xXF74XPlrlmjz8xy7bq4fpdQf:E3m/3z0mig9RF7O9GiK/p6f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2afb51fae9b8b5c11d14a6f9ccbba36c_JaffaCakes118
Files
-
2afb51fae9b8b5c11d14a6f9ccbba36c_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 21KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE