Static task
static1
Behavioral task
behavioral1
Sample
2f4fa1ab5bc62071519807bbc4a6b199_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f4fa1ab5bc62071519807bbc4a6b199_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2f4fa1ab5bc62071519807bbc4a6b199_JaffaCakes118
-
Size
1.6MB
-
MD5
2f4fa1ab5bc62071519807bbc4a6b199
-
SHA1
51f1d6e2517d84207a1c0560c8b8608dd3aba117
-
SHA256
efcd32df90d152902953850f2f2252f97b86a477a9e1c3aa1e988ed6ed8716a4
-
SHA512
88b6c79d855fdb50770bdd51f9cc93d2df34d7a3ca38f1c5ee690d2f2300361c37a4a65ce65af03bc0c55e1310e34215842395ce9e5fdcf60e9d47431d8033e0
-
SSDEEP
24576:Uu+1Cp7W2mLIoQoyUN3ZoCh7uRR+Xp/105DASFy8X4pKOwFnqbC9gFWdlM79:V+1AJmLOY3iRR+ZN035IpiFn0C9/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f4fa1ab5bc62071519807bbc4a6b199_JaffaCakes118
Files
-
2f4fa1ab5bc62071519807bbc4a6b199_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE