Static task
static1
Behavioral task
behavioral1
Sample
2a43fd4052c7c73198fed7c7e86de1c3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2a43fd4052c7c73198fed7c7e86de1c3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2a43fd4052c7c73198fed7c7e86de1c3_JaffaCakes118
-
Size
272KB
-
MD5
2a43fd4052c7c73198fed7c7e86de1c3
-
SHA1
c4af287cfd4dc863bf44706517e7931bec9856ae
-
SHA256
501eabb053090457debb431c153dccfa1dae77e143cecbac67fbd53c8ad170b7
-
SHA512
116ae4c93be22b5f2282a1de64a165e3566a0905c027c85974854ce14d2e1659ddcf4dd847e3c4a22746dff9232aa3a299338421053041fab91102210984d683
-
SSDEEP
6144:gIEgeRwL9FR1eTboMM44YJyWLjRbzrQVNKMiMastH7QZ4icW3734:ogeupL54pyWLjRbz4KSJtbC4V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a43fd4052c7c73198fed7c7e86de1c3_JaffaCakes118
Files
-
2a43fd4052c7c73198fed7c7e86de1c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
zquqsAVy Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XK3Zu3IH Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
e7deX0MW Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
i632fs4r Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CFvt9610 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
CFvt9610
-
XK3Zu3IH
-
e7deX0MW
-
i632fs4r