Static task
static1
Behavioral task
behavioral1
Sample
c2a513667f7fd153ae57ecc8646499bc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c2a513667f7fd153ae57ecc8646499bc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c2a513667f7fd153ae57ecc8646499bc_JaffaCakes118
-
Size
27KB
-
MD5
c2a513667f7fd153ae57ecc8646499bc
-
SHA1
0cefc5a18db50e0bb29c45abb5217bfd1c47c7df
-
SHA256
1af5e69a03f1b77b0c53c33f8796cc2f3991d1d42a103b0a83dbc7feaac336b8
-
SHA512
5b65af0d4076ebd6a9fe6aff5e517a5c66197362d85280639da6c32ea8c13651c7b1b44f887be756caae8c5ad7d5212bb8aa5971e63e757af793c1f9111dd305
-
SSDEEP
384:nLR3TEccS1kLZ6ykyhhjr6GpTyE/bKm1GupZyYofgqdmIfW7W4mo2OEAmBq4gpdC:nazS1kLZv3jLGWbKmguyB3O4OD8Aps
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2a513667f7fd153ae57ecc8646499bc_JaffaCakes118
Files
-
c2a513667f7fd153ae57ecc8646499bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 22KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE