Static task
static1
Behavioral task
behavioral1
Sample
2f2582073256acba1616343bb2ff0496_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2f2582073256acba1616343bb2ff0496_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f2582073256acba1616343bb2ff0496_JaffaCakes118
-
Size
22KB
-
MD5
2f2582073256acba1616343bb2ff0496
-
SHA1
782e883d124ac62ce5ff9e038e1c30b7c885c86e
-
SHA256
b87f08c5c3638ddedbb8ae90e36bd92e35da5d16e4bcbb6dabf67160e013919a
-
SHA512
3b53ef612831daf8d6fc97a0483ed35a32a39ffc3fb93c4dd786c51428ffa3dc0a1a329f6d638777ab61d18beb440aa8d447de67464986b420bf9aea9fc5205e
-
SSDEEP
384:bQNnDxL1RwupjUSOTO0MTfPFx9SQd6JcScnQCDPlh3czqBEuem/Dyw1VdW:bQNnDh1RH5MTyf78Qd6JcScTFczY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f2582073256acba1616343bb2ff0496_JaffaCakes118
Files
-
2f2582073256acba1616343bb2ff0496_JaffaCakes118.exe windows:4 windows x86 arch:x86
6a428f86d12f4bcbda38871c6fda3974
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
GetModuleHandleA
SetUnhandledExceptionFilter
msvcrt
__getmainargs
__set_app_type
_cexit
signal
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 84B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ