Static task
static1
Behavioral task
behavioral1
Sample
2ade689087ae03e5ba1400aa61b9c165_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ade689087ae03e5ba1400aa61b9c165_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2ade689087ae03e5ba1400aa61b9c165_JaffaCakes118
-
Size
52KB
-
MD5
2ade689087ae03e5ba1400aa61b9c165
-
SHA1
57b82899a8956f30989ecb7dd5390adb16172818
-
SHA256
8c2f84547abc6031497263489b5d77c163458e845830a2de9d987521fe16c30e
-
SHA512
4e0b6d45a559c7c037a4f0d2898e12494d214efab8d5cd062efb5690122e81b396a0e587799cf1faca8199fd6445f3140f0a11af587b533c5004772deb544fb0
-
SSDEEP
768:l5ZuAbjHj7RtN6sE9NRCJmZ8KmDUk6O1S2PF0NXVTo3D0PZzkVX3t4aENtUs4vnQ:bZFjD7RBSNRN/G1SJTQ2xctTEUTfuh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ade689087ae03e5ba1400aa61b9c165_JaffaCakes118
Files
-
2ade689087ae03e5ba1400aa61b9c165_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE