Static task
static1
Behavioral task
behavioral1
Sample
2101bc12c0f6e4db506e9ab5e606ca8c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2101bc12c0f6e4db506e9ab5e606ca8c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2101bc12c0f6e4db506e9ab5e606ca8c_JaffaCakes118
-
Size
580KB
-
MD5
2101bc12c0f6e4db506e9ab5e606ca8c
-
SHA1
7315f67439b2e8cf12e8f59ced6eaadbd3c2dcfa
-
SHA256
c0fd88cb2c4c4cea9001b54110c321e4ffbce086ef36d062ad1ae75eda73b553
-
SHA512
db0e8b853d6112833507476d12d4226b547da61349f18a8ec5704541bcdc93aa8f812cdbf611b1306c1ecb24b56b830ab9fc2cf8ec255643e5dd5746f51401db
-
SSDEEP
12288:cl6lNAYG16mrmVP7IfYem53u8bA1bb4vCyW4rZbH:cAjPVUQem/bKb+Cgr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2101bc12c0f6e4db506e9ab5e606ca8c_JaffaCakes118
Files
-
2101bc12c0f6e4db506e9ab5e606ca8c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 78KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petprg Size: 457KB - Virtual size: 1024KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE