Static task
static1
Behavioral task
behavioral1
Sample
2732fc2e6b1e34b8f1197d4b80522346_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2732fc2e6b1e34b8f1197d4b80522346_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2732fc2e6b1e34b8f1197d4b80522346_JaffaCakes118
-
Size
80KB
-
MD5
2732fc2e6b1e34b8f1197d4b80522346
-
SHA1
fdfcc1174c7f3c15e57522c17990d47385ee9e2e
-
SHA256
e4347b44be376d9752564e482954df14d9b523a778c23af3fee704042988cfb2
-
SHA512
e84d53cb1abcfe5be0e2dd50a65a9e25262b188b5bdf808a7f15cba1ed9be3bfec9fec58dfa56598e745eaeeaf805e03e7531b36f3876a00e1bec97e385bfde3
-
SSDEEP
1536:QSfGPYOv6u3mtvIV2HFKHmSztK1AatQ5PZmtugi2f:dfGPD2bdSxKOZmtuD2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2732fc2e6b1e34b8f1197d4b80522346_JaffaCakes118
Files
-
2732fc2e6b1e34b8f1197d4b80522346_JaffaCakes118.exe windows:4 windows x86 arch:x86
24734dd2e70099b3dbbd6bd67280238f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
wsprintfA
ole32
OleInitialize
oleaut32
LoadTypeLi
Sections
.PACKMAN Size: - Virtual size: 188KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PACKMAN Size: 79KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ifc Size: 1B - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE