Static task
static1
Behavioral task
behavioral1
Sample
2b185cd4548f4700c6028cf8936c70b7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b185cd4548f4700c6028cf8936c70b7_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b185cd4548f4700c6028cf8936c70b7_JaffaCakes118
-
Size
508KB
-
MD5
2b185cd4548f4700c6028cf8936c70b7
-
SHA1
7642165945d85f2dea9cf46817eddcb29fc7a23b
-
SHA256
23dac377f763b0d21fd2bb893875080cc3b5bea4dac8fe015c4121a779ed692f
-
SHA512
3ffaf8b4ca7e40a539690cee192589859528075d2f9d5ba91078abb03518b5735264ca356df3e6214c395b9d6ecf307f1956f56f7c2fd3bd4398136aff1cd088
-
SSDEEP
12288:Dveh5lVE5pnI35BrV0WuZtvLaXuqzAoK12IinD3pywnFR0L7dN3Cup:Dveh57elIJnI2+Hp121D51FI7dgup
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b185cd4548f4700c6028cf8936c70b7_JaffaCakes118
Files
-
2b185cd4548f4700c6028cf8936c70b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE