Static task
static1
Behavioral task
behavioral1
Sample
2fddf15f7fbcd105b1566fe84329c7f2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2fddf15f7fbcd105b1566fe84329c7f2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fddf15f7fbcd105b1566fe84329c7f2_JaffaCakes118
-
Size
107KB
-
MD5
2fddf15f7fbcd105b1566fe84329c7f2
-
SHA1
5d4b33bd2c597c70e5e3ee921f65d30389f7a33e
-
SHA256
61496fe866ec53d48173389dcef49e329fc44d9176bc29523e46f8cb153b8546
-
SHA512
1a35fa249dc741379ad59f06224ed0a0b07d27cdf4cdb99f122f7bf6f2eada1c45a99a43be41800875b34ba69585d7e8a9c27783114338fbfcd22dd9ef309b7d
-
SSDEEP
1536:n7HSvtl+/AnwY2FGVHW0IrylC0AIts1+UX0x64tjThYtjOwdM7JHapoVOH+:7Wg+V2Y20IrYaI+1zXOtjMOtVioV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fddf15f7fbcd105b1566fe84329c7f2_JaffaCakes118
Files
-
2fddf15f7fbcd105b1566fe84329c7f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 91KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE