Static task
static1
Behavioral task
behavioral1
Sample
2b0dec732318ade3d2ee0f97f0b08a58_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2b0dec732318ade3d2ee0f97f0b08a58_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2b0dec732318ade3d2ee0f97f0b08a58_JaffaCakes118
-
Size
5.7MB
-
MD5
2b0dec732318ade3d2ee0f97f0b08a58
-
SHA1
9e8e1c2145231026872cb9fcf8ec3e2eb28e4c37
-
SHA256
07b2eb1cbc71a01a6b47b01bd86a9264b701d16b639d981e96cf07c5042332a2
-
SHA512
873260d75b0d5c676cee2e4e2ad3856936b8e26e3c76c70a0fd83c9765226f325c49bb8574464cf53781caeb87ca0c279808918f3c18a79624d6d3aa23057f32
-
SSDEEP
98304:kwcVDvjpsLtQjMNrY3h/K75GT6UpDWCGoxc1wOhXu6E6UMoRcqy7f:kwyvjSLtQQW3FK7Syexc1RhXZ0o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b0dec732318ade3d2ee0f97f0b08a58_JaffaCakes118
Files
-
2b0dec732318ade3d2ee0f97f0b08a58_JaffaCakes118.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
uwzwyllp Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cejyzolq Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idqnisdf Size: 808KB - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
filzdkrm Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE