Static task
static1
Behavioral task
behavioral1
Sample
2a68ee37fca6f93304322ef624b5484b_JaffaCakes118.exe
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral2
Sample
2a68ee37fca6f93304322ef624b5484b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
windows10-2004-x64
General
-
Target
2a68ee37fca6f93304322ef624b5484b_JaffaCakes118
-
Size
476KB
-
MD5
2a68ee37fca6f93304322ef624b5484b
-
SHA1
13ab996cd9d450f520385d8a9a258ed3bdc03e57
-
SHA256
05447ba2be1bd2ae8c753fa30dfda94297eee558062fc6b39086f488af98b4df
-
SHA512
7431a643a9ad1ad1c972f7c5428c76cc0316dddd81df2791cd804112a15f41a8aa44dbfca2dac44cd2e8d67fdd4d400a300f51f52f44a47ea2e2f64848b0346d
-
SSDEEP
6144:dCiGKXaoRdVS9cSsBm0uQhMQ/o1YiEYiQWxQYu:g8S9cXBm0u5R+F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a68ee37fca6f93304322ef624b5484b_JaffaCakes118
Files
-
2a68ee37fca6f93304322ef624b5484b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f94c1648609eae14304d3145db65b9f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ord690
ord516
ord518
ord593
ord594
ord595
ord525
ord632
ord526
ord528
ord600
ord711
ord606
ord608
ord717
ord644
ord645
ord648
ord570
ord571
ord573
ord681
ord100
ord689
ord616
ord617
ord650
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 404KB - Virtual size: 402KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ