Static task
static1
Behavioral task
behavioral1
Sample
2734c01f7545967c4512f70beedc28d6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2734c01f7545967c4512f70beedc28d6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2734c01f7545967c4512f70beedc28d6_JaffaCakes118
-
Size
15KB
-
MD5
2734c01f7545967c4512f70beedc28d6
-
SHA1
66bb85f83cb5d669c6c4249c1219f852e3e50432
-
SHA256
b696f37c1c7df014e99a67a2ff75a6b04bdb39e5d70e156155950db63d1db434
-
SHA512
92590f798fc1fedcfccdb8ea3f3d1470c254c46b53203e6dc0c25ee258d2c8b12dd6f874b1304bff4ed5e2caad88b774a2d2add2f3b4d37d3a5d66265eb42604
-
SSDEEP
192:64hyK9qidyNHIbjSnBGcYEEp0+C0A0vguelYq34cVGRKFkR3Wp:3wKkidgIbunBGEEiK3v7y33vGRKF1p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2734c01f7545967c4512f70beedc28d6_JaffaCakes118
Files
-
2734c01f7545967c4512f70beedc28d6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.tls Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE