Static task
static1
Behavioral task
behavioral1
Sample
2156d2f56fa85a67fd4fb7d190050d81_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2156d2f56fa85a67fd4fb7d190050d81_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2156d2f56fa85a67fd4fb7d190050d81_JaffaCakes118
-
Size
15KB
-
MD5
2156d2f56fa85a67fd4fb7d190050d81
-
SHA1
0dc85f31db659f918971d79a48955fd8f8f1ba0a
-
SHA256
3726c16c8a6ca898b4c4708446a81185a6c719764bbe37dc5fcd0c4669849fdb
-
SHA512
cfa5dff42edc2425306b3ff193c6e6022b594dd3298adfa9d49aedf244b49ddbadc169d6fe2a61515e279e88f5bf1ebf26a65f1e22ed017eccf2aa703572cf2b
-
SSDEEP
192:WzSntLmliH4ggl4G21QUGpvciySAzW5kwFZDGgJwbZHiRc0H/h1WqOY7avqck/85:JBUJgitmMkQZSVMbfzGvqbs0nMmK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2156d2f56fa85a67fd4fb7d190050d81_JaffaCakes118
Files
-
2156d2f56fa85a67fd4fb7d190050d81_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE