Static task
static1
Behavioral task
behavioral1
Sample
2a3fa82a376f31cf0efd777d6ac737f3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2a3fa82a376f31cf0efd777d6ac737f3_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a3fa82a376f31cf0efd777d6ac737f3_JaffaCakes118
-
Size
15KB
-
MD5
2a3fa82a376f31cf0efd777d6ac737f3
-
SHA1
14a16926fe5652ebd3a194449dbf367653f25914
-
SHA256
1f4988b411cdc9f77673364bf2b579b973076cc331ff9b91cf5af78b2cb2a623
-
SHA512
491f4d1b579199b4fa2739b46d72654c00664318d805a8f3f7054c4da3bc211c0a2c3471361243afb82a790c8cadbc1fbb9466afabe2ae5c4562880229073582
-
SSDEEP
384:8WwmWJVbdjwFs88GOul6Cm732KCmbO6ogbDOVq:mBFW8dXjrogSq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a3fa82a376f31cf0efd777d6ac737f3_JaffaCakes118
Files
-
2a3fa82a376f31cf0efd777d6ac737f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ph�K0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ph�K1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ph�K2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE