Static task
static1
Behavioral task
behavioral1
Sample
2eb0c62e205ea541c52b182e0ec024c8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2eb0c62e205ea541c52b182e0ec024c8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2eb0c62e205ea541c52b182e0ec024c8_JaffaCakes118
-
Size
23KB
-
MD5
2eb0c62e205ea541c52b182e0ec024c8
-
SHA1
853d1c513c398563dad2a21fe873f2f5cc21a3b1
-
SHA256
996f28dd0c6a19360f1e27e6e7f7081d1a8d0437540487bb9efd8aa475b6c444
-
SHA512
09e92b95f50e971300e20c0ed8df238d2f45343468bceb1ab34a14eb49c0ca0ba29afa290ac54eeb7823df85e34fc50e7f49b469f3b00626459682971d70b725
-
SSDEEP
384:W1De/mYxOWyvDS+czAkTnGU1QmgMp0lbfSDFr3BXP:W1D0mE4vDXCHTGUKmIlcFr3B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2eb0c62e205ea541c52b182e0ec024c8_JaffaCakes118
Files
-
2eb0c62e205ea541c52b182e0ec024c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
37864467a36d50fb91fb94ca0b7c38c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW
msvcrt
_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf
shell32
SHLoadOLE
StrStrIA
DuplicateIcon
Sections
.text Size: 13KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE