Static task
static1
Behavioral task
behavioral1
Sample
2518c69df7bd0924941085c0afd8ca4c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2518c69df7bd0924941085c0afd8ca4c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2518c69df7bd0924941085c0afd8ca4c_JaffaCakes118
-
Size
224KB
-
MD5
2518c69df7bd0924941085c0afd8ca4c
-
SHA1
77613ba9b64814ec16dba4ca922ebb2b60f67238
-
SHA256
3dee01998ca1b950a1f2c7358c7c3eeabccc72682451f6645f75cec79486dddc
-
SHA512
bda4c4b8b7d0188d706ce28e473dac3cb361be8b628f0d551e7bba20c01a725a1f4656e363681cc87c9e767d72fe7bca979b7314b657fe815a666d412ba8dea2
-
SSDEEP
1536:jlp3+VaLKXtPuzvSh4QVnn2AsH2yruOKeHTKIdu9pe63LSqNM+681V:rGXt+vShnVn2iyruObTKIE9R2qDV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2518c69df7bd0924941085c0afd8ca4c_JaffaCakes118
Files
-
2518c69df7bd0924941085c0afd8ca4c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
roxqw Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dkci49 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
df9 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3dkci49 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE