Static task
static1
Behavioral task
behavioral1
Sample
2b05b656dfe29647a1f16b531d7fe21c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b05b656dfe29647a1f16b531d7fe21c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b05b656dfe29647a1f16b531d7fe21c_JaffaCakes118
-
Size
31KB
-
MD5
2b05b656dfe29647a1f16b531d7fe21c
-
SHA1
24381b99a2e8476fd10128870751e0f1ffc3b49e
-
SHA256
263396734ed7ebca5306964f76e2ddd762b77f0971a34711c959af215d3208e2
-
SHA512
7dfce68e5b92b84a485e2c72162f143a5ec2b0264a13e83335cf1fbe8ed951c87ce3786ced662a8f6773399dac2fee52df5d181bfaa1dd01b53fcbca75668bdf
-
SSDEEP
768:Woh7TzTBziuTeiZSVWihwEknh0L7OTLeNfQf+ju:RZNnEkh8OTKNa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b05b656dfe29647a1f16b531d7fe21c_JaffaCakes118
Files
-
2b05b656dfe29647a1f16b531d7fe21c_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 92KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ