Static task
static1
Behavioral task
behavioral1
Sample
2ba445351030950a86b33f69358aae70_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2ba445351030950a86b33f69358aae70_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2ba445351030950a86b33f69358aae70_JaffaCakes118
-
Size
16KB
-
MD5
2ba445351030950a86b33f69358aae70
-
SHA1
3e212d118df988f0d9c0d697b212e16b8c795075
-
SHA256
dbe2a70af9e211d05e47d533c0266b42d285a44d61c234f3b176ba5659988255
-
SHA512
778050d46bfd554bc4f1b59a8170439ba61fe2ee164eabee5cef83c9a65cf4a3904ea2107a8cc8838364d5d19e70addcf6e3f9dd1be8db329c82e7cb61d6f4af
-
SSDEEP
384:/gNRtC7vZpkpVopMITcriL6vsVE/iuC/hNzHoUg:/StC7vuopMCEiGIE5CDIx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ba445351030950a86b33f69358aae70_JaffaCakes118
Files
-
2ba445351030950a86b33f69358aae70_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE