Static task
static1
Behavioral task
behavioral1
Sample
2c1e6f59a94f7e29074be3943304b88e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c1e6f59a94f7e29074be3943304b88e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c1e6f59a94f7e29074be3943304b88e_JaffaCakes118
-
Size
73KB
-
MD5
2c1e6f59a94f7e29074be3943304b88e
-
SHA1
5d0b40a0464d3769595e238afa24b9d6f3c29fe7
-
SHA256
7e01d309db60ca086733e6a3d7d7efc00a5fdb3f27c55ad916f34929c62a9e7f
-
SHA512
28ee7a670d0cad79563dfd5356e0a9119589fe7bd7d5fd73712f58dc3616ea4da181eaa9d600beb61f1e7299135deff990ffa9478b6ad3a8c5581587dfaacc3e
-
SSDEEP
1536:TjMCSNijPtOzSpLORIihzOqno2q5JBxglJQpnN7bErPKhf:TjMc7AzSpyNaqno2q5JI+nN7bmPe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c1e6f59a94f7e29074be3943304b88e_JaffaCakes118
Files
-
2c1e6f59a94f7e29074be3943304b88e_JaffaCakes118.exe windows:1 windows x86 arch:x86
b46ead522a346c3a0732882852f5cd15
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
user32
GetDlgItem
Sections
.text Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE