Static task
static1
Behavioral task
behavioral1
Sample
2bcf4f225c267ae6fda1004f174d666e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2bcf4f225c267ae6fda1004f174d666e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2bcf4f225c267ae6fda1004f174d666e_JaffaCakes118
-
Size
64KB
-
MD5
2bcf4f225c267ae6fda1004f174d666e
-
SHA1
661cf00f98c7df887522626e5dd2b60a7e5bbd98
-
SHA256
e84df1d2542e14e7251f0b31c2aa095db6fd264ec7f1fee262d2e87cda696e60
-
SHA512
5984e5024e09eacc2ebb1ae4da1a2d7c9810a4882e79704fd5663bdaa911e6ecd009f598e08f08e6984a1d40f844318b0a4c4290c0625d708842e983a2519994
-
SSDEEP
1536:gvnlvkQhKwrB1fzG1apXi5cfYQleUHtNnzg:gnhF1i4Y5WYD0hg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bcf4f225c267ae6fda1004f174d666e_JaffaCakes118
Files
-
2bcf4f225c267ae6fda1004f174d666e_JaffaCakes118.exe windows:4 windows x86 arch:x86
4c0c4f68eff15cf5001f6952dc85cb0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
ws2_32
socket
Sections
.dft Size: - Virtual size: 296KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dft Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE