Static task
static1
Behavioral task
behavioral1
Sample
2e883c8c7bece5e6220d50ebca8d63c3_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2e883c8c7bece5e6220d50ebca8d63c3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2e883c8c7bece5e6220d50ebca8d63c3_JaffaCakes118
-
Size
1020KB
-
MD5
2e883c8c7bece5e6220d50ebca8d63c3
-
SHA1
5bc2f864b7b8f1e422f15866c7178cd928364470
-
SHA256
80dda1baef6b7556b48649fecedec8ecb24f7a7e1b1e6982aa6e9ee0729c471e
-
SHA512
a9ed7aa7c4b33bb7180ebdf186ea20a15a5a650d9b5f15343712ceb5a2ece64da04a233ad49d5eaa7785c5eaa12c423c27a1390aa24c9ac78cd37032580a603c
-
SSDEEP
24576:5nndbmV9QToaqMsQGuL51azTt9fyIXhKjuj7loLRWlpS:nbmGy2Uzx9fyIXAjUhplpS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e883c8c7bece5e6220d50ebca8d63c3_JaffaCakes118
Files
-
2e883c8c7bece5e6220d50ebca8d63c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 712KB - Virtual size: 708KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 160KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ