Static task
static1
Behavioral task
behavioral1
Sample
2f2e26eae2582d0859ed66887f956d0f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f2e26eae2582d0859ed66887f956d0f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2f2e26eae2582d0859ed66887f956d0f_JaffaCakes118
-
Size
12KB
-
MD5
2f2e26eae2582d0859ed66887f956d0f
-
SHA1
6c9c1c83ed7ebcca9c1d949d158fc1edc6a0a1a8
-
SHA256
b7c89929f9421d85f750025b7c0632b0b3cb15a00f2d7d564df3d1ea5951ccb1
-
SHA512
4e86ee81264e32d4c79e596296220ff5d5a321ca74eaf22465cb45a7fa08383c124bde74bb41420882447f128c9ddb6243ed45993fc352f4ea633a9ac40777de
-
SSDEEP
384:tVfago0VIUjZTVVYaiOSeK/A5VrginNJmw:3bGIV5iO+Crg6Mw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f2e26eae2582d0859ed66887f956d0f_JaffaCakes118
Files
-
2f2e26eae2582d0859ed66887f956d0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE