Static task
static1
Behavioral task
behavioral1
Sample
2620b9ddcbb5c8cae1374d732e9474b2_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2620b9ddcbb5c8cae1374d732e9474b2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2620b9ddcbb5c8cae1374d732e9474b2_JaffaCakes118
-
Size
914KB
-
MD5
2620b9ddcbb5c8cae1374d732e9474b2
-
SHA1
62b4bc7d63c65772a38817437db69734ce79bd6d
-
SHA256
a86a96b8a4427ef418b87336bf5a6d9b7676ffc16e18b9a8c2da6a60c2f290bb
-
SHA512
d0d542d3c20478cd49e0ac060a0c438dcf8b3a22aacea88d6ded5700260e3f4c53ecbb05473a3bbfb3556c54636da610d99c3ca970e55edaee6ee3595251df7e
-
SSDEEP
24576:56sqE5z2lDDwdlrOzWqoliKhBfohDJw5H343:56sqyz6DULENOmw5H343
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2620b9ddcbb5c8cae1374d732e9474b2_JaffaCakes118
Files
-
2620b9ddcbb5c8cae1374d732e9474b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 880KB - Virtual size: 878KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code_01 Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE