Static task
static1
Behavioral task
behavioral1
Sample
2fc72ef5c3a02519cd4b9ef6704c19d7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2fc72ef5c3a02519cd4b9ef6704c19d7_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fc72ef5c3a02519cd4b9ef6704c19d7_JaffaCakes118
-
Size
156KB
-
MD5
2fc72ef5c3a02519cd4b9ef6704c19d7
-
SHA1
aa4911677974457e1b0d7fe5f55da3a0199d952b
-
SHA256
5bad3a29c389d9f999de70d86561ee41c5ff755e1f6a2291bb54921d3d98c209
-
SHA512
9e1ca1be0ec008d24fb0a1a16acba1a42ff57d6a935d8994bd36f4c097bacf7e64155af5c51b71af70e5d4766f24b2d6a98368c0798960265a66d3cadd8ada11
-
SSDEEP
3072:POP1YtIujOwjZRdWQzn9k/c4SNcENt9xIpuLjscRHGCRo769PXc3kDL:81GIu6O97JNLnx8uLJRDoaP7DL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fc72ef5c3a02519cd4b9ef6704c19d7_JaffaCakes118
Files
-
2fc72ef5c3a02519cd4b9ef6704c19d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
58bc315907d66bd6874cde66e709755a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
msvbvm60
_CIcos
Sections
.text Size: 26KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE