Static task
static1
Behavioral task
behavioral1
Sample
2b7adcdbe6838b228dcec71fc8cfff6b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2b7adcdbe6838b228dcec71fc8cfff6b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2b7adcdbe6838b228dcec71fc8cfff6b_JaffaCakes118
-
Size
87KB
-
MD5
2b7adcdbe6838b228dcec71fc8cfff6b
-
SHA1
1970adff09a77623dda5106d7dd46bb861ec0bb5
-
SHA256
56030eb7a94368214b220b11f3ad4395e5c80079e701393ecb776d117b44e62d
-
SHA512
89543e9f33c8af264b659149c993892f8ded1efd5f4bfcad8cc726110bacca1bdb30464cd5d2a811a0b05422906e14c13675fd5ce79a802111e07712be0cda7e
-
SSDEEP
1536:WNa2ZXlNd59jIlBx3TZZoDQ3nD9emVxPUnkgqZvSgceM5NLxm7SALstB8:Wg2nN1jm9ZPz9V/gaSTlNSQO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b7adcdbe6838b228dcec71fc8cfff6b_JaffaCakes118
Files
-
2b7adcdbe6838b228dcec71fc8cfff6b_JaffaCakes118.exe windows:4 windows x86 arch:x86
5fb9be659485e98bc6d04b5f2af310f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
LoadLibraryA
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE