Static task
static1
Behavioral task
behavioral1
Sample
2b745fc99929293b6fbb8cce31d66481_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2b745fc99929293b6fbb8cce31d66481_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2b745fc99929293b6fbb8cce31d66481_JaffaCakes118
-
Size
76KB
-
MD5
2b745fc99929293b6fbb8cce31d66481
-
SHA1
64ee9fc4b41494faac0b5bbc213f56e5f33f73e6
-
SHA256
f6aa864d47d83e18edc880a109d96d34e1a745784b2edce2709bd749d6749dc4
-
SHA512
fd8acf1f9d3aaca08625510887d5db68e9e909d98583dd4de8f6426c3a1d88fe2e17aa0ee5f5727787c9100e9367bbc12552a3b138f7794e3663585b23720e8c
-
SSDEEP
1536:gYk5A3f4zpGiDk7ztWB/awm3RmyxI6h8pjVrs2ryrd1vUQuq6:K5A3foLD/gw56OHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b745fc99929293b6fbb8cce31d66481_JaffaCakes118
Files
-
2b745fc99929293b6fbb8cce31d66481_JaffaCakes118.exe windows:4 windows x86 arch:x86
6f4975381a2e3330f3dba856b9a9452a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexW
RtlFillMemory
BaseInitAppcompatCache
CreateMailslotW
FindNextVolumeMountPointA
GlobalFix
Heap32Next
GetNumaAvailableMemoryNode
GetLogicalDriveStringsA
SetSystemTime
GetSystemDefaultLCID
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE