Static task
static1
Behavioral task
behavioral1
Sample
2e20c32acedd2f58e8cd546c7d8483d3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e20c32acedd2f58e8cd546c7d8483d3_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e20c32acedd2f58e8cd546c7d8483d3_JaffaCakes118
-
Size
576KB
-
MD5
2e20c32acedd2f58e8cd546c7d8483d3
-
SHA1
29a686a2dd05d2882b6946efa5afe118f06d761e
-
SHA256
e55f937f7ed5d3abde1d41b0a1765fcf2fe81b246b93277c0ca775648c1ffa39
-
SHA512
a66a28cdd212597e1254fa4e94ad8e56c9e141bfa3085b193d419dda356a02589acfe667daa2d91a5a3a6ca8130bd3bd91c4db739311dee6f3f8544375db2258
-
SSDEEP
6144:8gLwyJSauGho3utrc2NxHXI7asg5Rq8yVX6n7waAk/1isI5TQXgTTSj:8gBScKnahDREVY7/Ak/1zcTxT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e20c32acedd2f58e8cd546c7d8483d3_JaffaCakes118
Files
-
2e20c32acedd2f58e8cd546c7d8483d3_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 276KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 292KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ