Static task
static1
Behavioral task
behavioral1
Sample
2b8e171983ed0fc38c7517c311fbb8ae_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2b8e171983ed0fc38c7517c311fbb8ae_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2b8e171983ed0fc38c7517c311fbb8ae_JaffaCakes118
-
Size
124KB
-
MD5
2b8e171983ed0fc38c7517c311fbb8ae
-
SHA1
f070f59a2dbc1ae5a25d466943eae67644ac3d9a
-
SHA256
02478206c2876381b0813fcef94546c36e536a2dbbc21c7a7d716522cadc4bfa
-
SHA512
f4066ab8070d2b74625dbc351f2911257988609c8af7d3bbf08fad2d2febb952f02f3a1445641e94b0d7bad763d9767c7b4bc5e6bfa0a057f84a6347d81ff924
-
SSDEEP
3072:Ns0uSyTn8AwXzcYeY69t8KEAIKelkMkLLSHmIUUU0:O0udz8dDd6VEA+6MwuHnUUU0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b8e171983ed0fc38c7517c311fbb8ae_JaffaCakes118
Files
-
2b8e171983ed0fc38c7517c311fbb8ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
bb01a0fc3b776b726f021c130629577a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualFree
GetModuleHandleA
user32
MessageBoxA
Sections
�d Size: - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�X Size: - Virtual size: 659KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE