Static task
static1
Behavioral task
behavioral1
Sample
2da7fa0a49204dd7d715107b67dfa01a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2da7fa0a49204dd7d715107b67dfa01a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2da7fa0a49204dd7d715107b67dfa01a_JaffaCakes118
-
Size
103KB
-
MD5
2da7fa0a49204dd7d715107b67dfa01a
-
SHA1
a6264a3dd9b4cd2d4a4b4b6956798835bfd806ec
-
SHA256
69be28b43f8949845ede6074183861dfa69c5514131e13ccc2050a06d54229f9
-
SHA512
dbab3868d436f7d0904213154ff1c3faa0dd6de11385657aa930daf891c7bfc2747f80082f290c771f00845f9084e5886f566d312da805a2d2855ebd88648ebd
-
SSDEEP
1536:KIQ/mCZPt0YVQyPfL1GuFTEOWC4sM+0i8jy1BVP0+7nMH2EqTuWp39l22adJpo:KIAmiPtDVQyTEgM+0iSSMT8TBZ6f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2da7fa0a49204dd7d715107b67dfa01a_JaffaCakes118
Files
-
2da7fa0a49204dd7d715107b67dfa01a_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
Size: 99KB - Virtual size: 981KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE