Static task
static1
Behavioral task
behavioral1
Sample
2a691918bcb332a770dab845c443ae0c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a691918bcb332a770dab845c443ae0c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a691918bcb332a770dab845c443ae0c_JaffaCakes118
-
Size
15KB
-
MD5
2a691918bcb332a770dab845c443ae0c
-
SHA1
88d9d5a2e6409b40f5ffb7474e8d604c3e2264d7
-
SHA256
cb5eeff10ec8f0b974f9adbe6ac4793f58c0a413ad74ba0b39bd73f6ec65be25
-
SHA512
75dc601254a0f9f27bdaced8105d8385264fab2d8cea14d5a59f90dae5cfd7aaff325c623c00f76f7de7ec66cd934551b7993bfeed629b1416eba8f23e631e8e
-
SSDEEP
384:3vOu6Myj0c8fCCkfKeyAjEKUVR31AQDXzHZn/vV:s9ECfKeto/eQDjHZF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a691918bcb332a770dab845c443ae0c_JaffaCakes118
Files
-
2a691918bcb332a770dab845c443ae0c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE