Static task
static1
Behavioral task
behavioral1
Sample
2cb236767ca2c1e20143ff769621a705_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2cb236767ca2c1e20143ff769621a705_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2cb236767ca2c1e20143ff769621a705_JaffaCakes118
-
Size
2.9MB
-
MD5
2cb236767ca2c1e20143ff769621a705
-
SHA1
d290e8e9f9f7acd00c53e5d29d05dd50f7bacddb
-
SHA256
e32811ab7b1c1118ba73a90a31082cb2b2a9b607410b8ba5ccad15bb15403548
-
SHA512
e6926bd75ce1c6ecf706d40385816fcde0ad8046561e919d8b4690215c3dfba94254232074c57cd75e8ff008207d83ee7b66775b02dcbb3fd8c8645ab80c9c77
-
SSDEEP
49152:ZnQKl2+q6ICk6hcbDn1b8Cv7mOsff5Hzp/UNRXfibjOPQssgJxUn2ct8t/A2Gp:ZnVhI36ebZrS5TVefMCP7Jin2cettG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cb236767ca2c1e20143ff769621a705_JaffaCakes118
Files
-
2cb236767ca2c1e20143ff769621a705_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 2.9MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE