Static task
static1
Behavioral task
behavioral1
Sample
2bfa855f00cf6f5f5fd9dbcc397fb039_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2bfa855f00cf6f5f5fd9dbcc397fb039_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2bfa855f00cf6f5f5fd9dbcc397fb039_JaffaCakes118
-
Size
20KB
-
MD5
2bfa855f00cf6f5f5fd9dbcc397fb039
-
SHA1
e7af7ae958f0dbdd3f9a2cb562b841724f040109
-
SHA256
1c1c5da305ad4912e0c8adf5b46a90199d264eee93fec404c333d848800c3a75
-
SHA512
18d74c144cc04f4c03632fc97226e68fe75148ab6938ee2df1edc150d6df29ae4138574a84da5ef022a30c474b08ec6a43e9d60634fcd6b90ee811a55c689515
-
SSDEEP
96:4g1MxBbD26swYHJPXvBA6fuuZj/qxeqM9hewCuMY8iV9LugWVJ0VPg64SVgY119g:4kMQwg/vRfdqxeqKxxFqqnGkmhddtl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bfa855f00cf6f5f5fd9dbcc397fb039_JaffaCakes118
Files
-
2bfa855f00cf6f5f5fd9dbcc397fb039_JaffaCakes118.exe windows:4 windows x86 arch:x86
b6269c24de79d02015fe2d94ec783a23
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GlobalFree
LoadLibraryA
FreeLibrary
GetProcAddress
GetModuleHandleA
GetLastError
SetLastError
CloseHandle
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 837B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE