Static task
static1
Behavioral task
behavioral1
Sample
2238ba0298b1b4ce6e08b8ee29232d34_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2238ba0298b1b4ce6e08b8ee29232d34_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2238ba0298b1b4ce6e08b8ee29232d34_JaffaCakes118
-
Size
280KB
-
MD5
2238ba0298b1b4ce6e08b8ee29232d34
-
SHA1
948fde49b79073664e17bf6817e4c0f0ca07b790
-
SHA256
32bf3837b49ba7db543a1efd39dd4947ab9b3ec370b68c7304249c5b15cc1019
-
SHA512
94111d0c7f0bd9677b278d016a30280c11320c40af105cab70468bf4ac5c452dfd905fb1dec1ad8432fed0164ebb3bd091159ddf50018405f9fef5d166e30ae7
-
SSDEEP
6144:gbtg7nfknMbT49p7RxSKALQce6D3jX3ATv:wgwnMbTC9xcLLeO3jHS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2238ba0298b1b4ce6e08b8ee29232d34_JaffaCakes118
Files
-
2238ba0298b1b4ce6e08b8ee29232d34_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Sections
�. Size: 18KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.. Size: 4KB - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE