Static task
static1
Behavioral task
behavioral1
Sample
2e9dae14c87f68b783f24cc095e61e08_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e9dae14c87f68b783f24cc095e61e08_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2e9dae14c87f68b783f24cc095e61e08_JaffaCakes118
-
Size
32KB
-
MD5
2e9dae14c87f68b783f24cc095e61e08
-
SHA1
4525e0d607a20430c849fa9457949920abb429cb
-
SHA256
ff012e4f468c4355339fb0b700af042ed0da6ad07463cc86e232a1807c0c7536
-
SHA512
8b67bec57fbb50426e9cb0154aa0a76c2a222b12cbba43e56d747a585bd0675946f4319b453c05e6a00d1f0dd0ec1735b1a49dab38e93b26a4c5246d78b1c7af
-
SSDEEP
768:E1BNIZTbDF0GDwLeJlRSsnTjBJZWJ0R5PFjPiad/:E1ByTnjwyLXTjrJvtjPpd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e9dae14c87f68b783f24cc095e61e08_JaffaCakes118
Files
-
2e9dae14c87f68b783f24cc095e61e08_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 22KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE