Static task
static1
Behavioral task
behavioral1
Sample
2f006dba8fead383009423e13f17bfce_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f006dba8fead383009423e13f17bfce_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2f006dba8fead383009423e13f17bfce_JaffaCakes118
-
Size
89KB
-
MD5
2f006dba8fead383009423e13f17bfce
-
SHA1
36e65821566436097d1afc4080646764ad72455e
-
SHA256
bf4bf99906975fb2c07b23cdaa82f52037095993222c6180fc1c5a585952acdf
-
SHA512
8fa1091b5e7e666297875ef8fa1b10fae267a7ab7a00d5d44368c94d7f7d69edef9bb18527aa6df1c3395a0243a036bae005e945d404d78dd55427ea47bb9ada
-
SSDEEP
1536:8CY/3lPmhjX5eL3fC8TJkqXFmZ7NtMl6avr9qz/5+HeC4hDUf3mNX8ae+c1z9SLy:JY/1PejJeLPC8TJyZklJgz/rti3YG+DO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f006dba8fead383009423e13f17bfce_JaffaCakes118
Files
-
2f006dba8fead383009423e13f17bfce_JaffaCakes118.exe windows:4 windows x86 arch:x86
94b969621a6d01b2c3fcb5c464a09df5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ActivateActCtx
GetProcAddress
GetProcessHeap
GetModuleHandleA
GetProcessId
VirtualAlloc
VirtualProtect
VirtualFree
ws2_32
send
Sections
.code Size: - Virtual size: 440KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 89KB - Virtual size: 92KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE