Static task
static1
Behavioral task
behavioral1
Sample
2ea3d94d5d8a2ca14e3a95b596509ee8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2ea3d94d5d8a2ca14e3a95b596509ee8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2ea3d94d5d8a2ca14e3a95b596509ee8_JaffaCakes118
-
Size
61KB
-
MD5
2ea3d94d5d8a2ca14e3a95b596509ee8
-
SHA1
989290b68bc1567cf1fe2a4442d6bb56f32f397c
-
SHA256
bafdcfcb075367b7ef0ebfb933b70aa7985ee7fbe8b7bd6c588492be1bfffb85
-
SHA512
8de9c81a7f1f8d856735a57dcad699ef5f5707402c7a3cb90fa2e4840ffa7aad6128abfcc62661bd5ba2ced18ea2ea52d19d5fd87450c0197905ece36327d775
-
SSDEEP
1536:/341V+CXWL6Hg25IxZmNUoFS+OKsVaB8XZ7N2AD68:PafVHN5Ixi7EfKYJ7kAe8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ea3d94d5d8a2ca14e3a95b596509ee8_JaffaCakes118
Files
-
2ea3d94d5d8a2ca14e3a95b596509ee8_JaffaCakes118.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
Size: 26KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE