Static task
static1
Behavioral task
behavioral1
Sample
2e4e2f5148c34ed72188897995d6eaea_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e4e2f5148c34ed72188897995d6eaea_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e4e2f5148c34ed72188897995d6eaea_JaffaCakes118
-
Size
69KB
-
MD5
2e4e2f5148c34ed72188897995d6eaea
-
SHA1
9de70b25ed6008f83db258690564461c6d2b29e5
-
SHA256
ef3133ef41e55d0575411200f3c566e6b7a515760a9ac487752b946fa24518df
-
SHA512
ee1756f62ce200e4b2560a25b7c6e2f3bcbbda4c755a1b7cf668cb99a36fc75b2c9ebd60c6c9ff842fe0bef2905596afaaf8c2d5faa213762d3c6dc839bb5dc4
-
SSDEEP
1536:JZeG/U+ndbblR9UME8RSj6rMgPlNLLHsC4gAZ:yG/FdbTdE8RtMgd9wgAZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e4e2f5148c34ed72188897995d6eaea_JaffaCakes118
Files
-
2e4e2f5148c34ed72188897995d6eaea_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 63KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE