Static task
static1
Behavioral task
behavioral1
Sample
2fc9e00eeb89a672c38fead835b1370a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2fc9e00eeb89a672c38fead835b1370a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fc9e00eeb89a672c38fead835b1370a_JaffaCakes118
-
Size
102KB
-
MD5
2fc9e00eeb89a672c38fead835b1370a
-
SHA1
b40d3bfe32dd60abcefea6f7901c23cab2a921ec
-
SHA256
0fd260209705d4fae5f9dd9d4771ccbb7dd628a5c8f571cb9a3b510d88816fc9
-
SHA512
064fb36d135673c2489ed6cfbae159b33b5205e49f7951f913e6bc06b8865a2b4af336446e3ed995ebb1d1153dee897a7e765ad578242fbe13b2eb8c3eb4972e
-
SSDEEP
3072:Rxjx5Pm76WOeAhvEivI5JpHiK6fKtjbwR:Rv5m76kAhv9Q5/Vu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fc9e00eeb89a672c38fead835b1370a_JaffaCakes118
Files
-
2fc9e00eeb89a672c38fead835b1370a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f35da0feaeb1ea3121dbe4b43d43d5fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExA
kernel32.dll.
LoadLibraryA
Sleep
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE