Static task
static1
Behavioral task
behavioral1
Sample
2f18b172fef40339de3e77a40af5935e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f18b172fef40339de3e77a40af5935e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2f18b172fef40339de3e77a40af5935e_JaffaCakes118
-
Size
54KB
-
MD5
2f18b172fef40339de3e77a40af5935e
-
SHA1
3a5b52212b3dfd7069dcc28c5209ebd848dda094
-
SHA256
8a5adf966e8c954fe9edbe79dad2a7ad4d0db6ed8279c8f7b60379b6541dd41b
-
SHA512
e1d73f49e4cb8424ada56441220e71744760cabf36da54c0ad24c9eb16ccf9b608146be368744bd318501731fbbebf63ff37698516a30e714a795022dee41813
-
SSDEEP
1536:inzwW13qUFvD8KBW/V+uqbykJpxC9zepoaZpjXGhfAPf:qzwI35l8KBsnWk9ey0Ehf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f18b172fef40339de3e77a40af5935e_JaffaCakes118
Files
-
2f18b172fef40339de3e77a40af5935e_JaffaCakes118.exe windows:5 windows x86 arch:x86
c7351b0c75c3d85886145660837b545f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
Sleep
Sections
.text Size: 512B - Virtual size: 173B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 102B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE