Static task
static1
Behavioral task
behavioral1
Sample
2b4f9701746dc669145bfb09ce1ec5e2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b4f9701746dc669145bfb09ce1ec5e2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b4f9701746dc669145bfb09ce1ec5e2_JaffaCakes118
-
Size
466KB
-
MD5
2b4f9701746dc669145bfb09ce1ec5e2
-
SHA1
2c79a7946f85eb165d31ecb74d254e4affdf3fc3
-
SHA256
4748f700c42f5dfd628de0e12d7ca1023d4649dc889c7f53c7452eaa159db038
-
SHA512
26dfc9d83f5685f5d3978a12496e3bda8cd6c236efebf46c67e752645618de7a9669bc13eaf31b8f01c8e77bc1fb81423d2039cf26ec9a66878ed8a5706fd401
-
SSDEEP
12288:qD0rcR+AZ+rTdEwPcjGt7wkdtJ2973K5wQZBND:yaqTMxEwP3bdt6DG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b4f9701746dc669145bfb09ce1ec5e2_JaffaCakes118
Files
-
2b4f9701746dc669145bfb09ce1ec5e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 439KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE