Static task
static1
Behavioral task
behavioral1
Sample
2e8c0f0eefb2eaa04da141a601e3374b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
2e8c0f0eefb2eaa04da141a601e3374b_JaffaCakes118
-
Size
161KB
-
MD5
2e8c0f0eefb2eaa04da141a601e3374b
-
SHA1
b415783733e9fa78b47859f709c7b0cbf82f7b7d
-
SHA256
0ed830506130c70eab8219c478f3e47e5e98c3409c47280126f0e3a1d91a3972
-
SHA512
480911a1d8cfaf07a32a714ee37127238ec030842db40bc51bd459284290ebc42416cbd135276c81e8712cf7b267f6f8bf2df99c39e6698aee2280ae3f9da4c8
-
SSDEEP
3072:EEIo1Z5RKCD+z0wiitB+8A7TT2yUcqIOx4BVqZMsBL9wn9cavaH0XeWt:nLqzuitMFeyvZOx4yvLKumaHYes
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e8c0f0eefb2eaa04da141a601e3374b_JaffaCakes118
Files
-
2e8c0f0eefb2eaa04da141a601e3374b_JaffaCakes118.exe windows:4 windows x86 arch:x86
1e5754ee4e2189aa1d2401805e372d4e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
OpenEventA
LoadLibraryExA
GetProcAddress
LeaveCriticalSection
Sections
.itex Size: 159KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE