Static task
static1
Behavioral task
behavioral1
Sample
2b9a87b5d9fd3c0983e49006b6c00633_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b9a87b5d9fd3c0983e49006b6c00633_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b9a87b5d9fd3c0983e49006b6c00633_JaffaCakes118
-
Size
474KB
-
MD5
2b9a87b5d9fd3c0983e49006b6c00633
-
SHA1
554c7c33c252c644e6a8118c684b73c2c07d3335
-
SHA256
cd6e4ea2fb0e5ac46c83066a608558e721021ffc9761ea8e9f7c6bc2098989f7
-
SHA512
817abd68379b646f17d3d7ea5146c546ef48283fc755d5e524c7860674152622e77611be2eba9bc3d4bdc0a14e74f65e457a315501e1a7af51dea9438aab98a2
-
SSDEEP
6144:II+FRARuGvya8LInc0MzH6v6HrhLiu1fXPyRgFeXR1PD6:IfFRAnya8MOH6v6HrhL9I6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b9a87b5d9fd3c0983e49006b6c00633_JaffaCakes118
Files
-
2b9a87b5d9fd3c0983e49006b6c00633_JaffaCakes118.exe windows:4 windows x86 arch:x86
a53f732e1bbd70e2b3217e8d53ce6afb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
Sections
pec1 Size: 123KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 349KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE