Static task
static1
Behavioral task
behavioral1
Sample
2116dbba3852b6ab2a3c8cf3ff2942df_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2116dbba3852b6ab2a3c8cf3ff2942df_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2116dbba3852b6ab2a3c8cf3ff2942df_JaffaCakes118
-
Size
108KB
-
MD5
2116dbba3852b6ab2a3c8cf3ff2942df
-
SHA1
6bb81b635e8ecfbb5beda53f4ff24bf929188911
-
SHA256
2924869a150e6c9d8a9db56931d1cb3799d22aabaf9c4f618119b8549b734672
-
SHA512
43aa12b5c591ad8d145f3757e104654f2db0e287f3cfdcf6d8e35c61aed49e39d9c30a8b78ccf6d358e1eb8d4455f8f2718e50a39b472cca74db7085ec5d72d8
-
SSDEEP
768:+BhDUBBblvDw/Rf7C22g6c0BIc7t9RmDMkQPq1Jax4rAmC9CbJOxJkMKbmT8+6bw:+3eBblvspznWITMkuXfKbmT8+6bw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2116dbba3852b6ab2a3c8cf3ff2942df_JaffaCakes118
Files
-
2116dbba3852b6ab2a3c8cf3ff2942df_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE