?KeyHookMsg@@YGJHIJ@Z
Static task
static1
Behavioral task
behavioral1
Sample
2b87e1b937bc882defdea7d35e23a145_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b87e1b937bc882defdea7d35e23a145_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b87e1b937bc882defdea7d35e23a145_JaffaCakes118
-
Size
90KB
-
MD5
2b87e1b937bc882defdea7d35e23a145
-
SHA1
ac2d931298499bc923911270e4c56ed0d3f1b095
-
SHA256
ee5f5e64abe6af54682ef7a5f98cdcc38caee17dba4f69393184579794300e39
-
SHA512
1728973caf84d8841848ce09741d5fa33f9b91183522de6cbac7d3035a21ba79afad8fada6cdbcc938b63e64194778101584066ad9735e629fce4a037b866f4f
-
SSDEEP
1536:zm+hzcSOyDzoOg+aQRBJu+zpaeihbV9QCTNnwF+HzMomEmlsLNmrhLBBsh:bzcS9Dzo5Auh9lNnwqPNmfBsh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b87e1b937bc882defdea7d35e23a145_JaffaCakes118
Files
-
2b87e1b937bc882defdea7d35e23a145_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 886KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ