Static task
static1
Behavioral task
behavioral1
Sample
2fc00ad73454599924cd17a32375fe2f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2fc00ad73454599924cd17a32375fe2f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fc00ad73454599924cd17a32375fe2f_JaffaCakes118
-
Size
31KB
-
MD5
2fc00ad73454599924cd17a32375fe2f
-
SHA1
22714105556c50228f85368e05ad385889f8b0fe
-
SHA256
b65fcfca08eb1e1ba38366c25a45c1de18ff9dee6659c0733901e0f431a78e09
-
SHA512
a54f27c1ed0ccc48a38113e78e805c2fdcff0c44ff6fbc5ac52f1c24e06f95d0bcaf5a8b6896e332da7624b0bc3b6e36804acf602c1977a47f54532458937d3d
-
SSDEEP
384:3WW4EAyzPRet+SHrnF7wqKK1RAOw8j8ZuGDMY2UfK:3XAyzZhIKqbDjSDMYR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fc00ad73454599924cd17a32375fe2f_JaffaCakes118
Files
-
2fc00ad73454599924cd17a32375fe2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
2c35ed123bf7fb5532653325910c7a41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree
Sections
.text Size: 8KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.llydd Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE