Static task
static1
Behavioral task
behavioral1
Sample
2e1a30cdd579144aeb7a7c40e46abe96_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e1a30cdd579144aeb7a7c40e46abe96_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e1a30cdd579144aeb7a7c40e46abe96_JaffaCakes118
-
Size
117KB
-
MD5
2e1a30cdd579144aeb7a7c40e46abe96
-
SHA1
32db997c2071aca3d719be6b6de7ba1a812eed16
-
SHA256
c3ab10f3e030cc570eadaefcebe128447d2fc02223c5dc71bfb24cc645e5eab2
-
SHA512
40fef7f3dd09ee5b63587920a101bf39347eeda0f807e91b4afe4446ed5d200f5d4af61396ba4ac0ffd20be60a5c9dd746984a795b8af79c8630c0b3b7df2632
-
SSDEEP
1536:/7ihSsg4zN+7fIKAw56lOntxJfXex4nMCW9pAtsRGUnfIvsOJvmipaTXZViSg/vj:/IS52ejA9x4nX44UnfmFmbDxg3j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e1a30cdd579144aeb7a7c40e46abe96_JaffaCakes118
Files
-
2e1a30cdd579144aeb7a7c40e46abe96_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE