Static task
static1
Behavioral task
behavioral1
Sample
2da36d4e3dbad4024bfe014ffbf5be3a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2da36d4e3dbad4024bfe014ffbf5be3a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2da36d4e3dbad4024bfe014ffbf5be3a_JaffaCakes118
-
Size
258KB
-
MD5
2da36d4e3dbad4024bfe014ffbf5be3a
-
SHA1
5ef6b93ef9d4a6f0ca551d1826564ab8a8f71c09
-
SHA256
ad4a7947d09230f55701d6a10be7b88995e97a884469a54b5c94d7ae782fcf11
-
SHA512
b77ea0ffad80dc8eb6d9c5e81ca5137608acdfa0d7faf771b673b758d065da59869f405b2e3e3ecee47048b0122d95487f5dd6519bb8243469f0832b858606a8
-
SSDEEP
6144:YSw3uQUDFJSbFXOGbgfnLfx15b805zU9CXsj:fw3uQUDbYesgfntny9C8j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2da36d4e3dbad4024bfe014ffbf5be3a_JaffaCakes118
Files
-
2da36d4e3dbad4024bfe014ffbf5be3a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 244KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE