Static task
static1
Behavioral task
behavioral1
Sample
2d75354bc8b0b60c6ee8efc5fd7d60dd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d75354bc8b0b60c6ee8efc5fd7d60dd_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2d75354bc8b0b60c6ee8efc5fd7d60dd_JaffaCakes118
-
Size
189KB
-
MD5
2d75354bc8b0b60c6ee8efc5fd7d60dd
-
SHA1
7d15ca86d0b18d4002e0baa5841de5a04e1f58ce
-
SHA256
8c678eb59de0191d4271cac7213b277cef4e7259d2309039c30eb1c53dfa543a
-
SHA512
72335de2a2c8768311821d5cd765e12e7fdd0a42cf743c055d3b69d164f0566e2e82ffd22be8e62a7fa03149b427a34547fece04c4c555ba8492f29d574e4839
-
SSDEEP
3072:BNpqEtslAFH9+nrFO89Okp+EUojsuVY1JWv3AAgMr3Fr1ubZJKw:BDZtslwdIFWmU6suV6Mv3AExZuVJKw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d75354bc8b0b60c6ee8efc5fd7d60dd_JaffaCakes118
Files
-
2d75354bc8b0b60c6ee8efc5fd7d60dd_JaffaCakes118.exe windows:0 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE