Static task
static1
Behavioral task
behavioral1
Sample
2fdb2253ccb6a9c8890895516cb17922_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2fdb2253ccb6a9c8890895516cb17922_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fdb2253ccb6a9c8890895516cb17922_JaffaCakes118
-
Size
174KB
-
MD5
2fdb2253ccb6a9c8890895516cb17922
-
SHA1
9261f1e157b609e8c8bd56a5d1c1ad43a9e53f8a
-
SHA256
9412975cdd31732f838dc33b7823a2a2adfb631e96e18addebf214ef567774a3
-
SHA512
8fbe3a9c2fc6264a5c65279155c2fdab6251b15a9e3ceaf78707b76c1b7e723bc426cda7cbef4ce5d6e110da3028a85ec9d45e358615a315fe205a97709a9e50
-
SSDEEP
3072:OOQ8zvdUbrZmYGJKUkGFXMgXkRKv3a/ZLEiRYM4gZ7nsQgBacIpn:ObMUxmYrUkGeWKUq/ZgiyM4gRn/gg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fdb2253ccb6a9c8890895516cb17922_JaffaCakes118
Files
-
2fdb2253ccb6a9c8890895516cb17922_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 149KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE