Static task
static1
Behavioral task
behavioral1
Sample
2c16dd713e5e018d2234eef545c3efd3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c16dd713e5e018d2234eef545c3efd3_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2c16dd713e5e018d2234eef545c3efd3_JaffaCakes118
-
Size
791KB
-
MD5
2c16dd713e5e018d2234eef545c3efd3
-
SHA1
b79ba3bc3a01fe9419c7b38517db26ca43ba7a68
-
SHA256
6ff857713d1805e31ef18ce1a42e772f6f7d4b317edcb4619f66e14f69abf3a4
-
SHA512
8e5d3a3e4ae1159fed38b82c3d0ae747ab6d48a66c31c08ca9abddf5b01b49836fd6c89a1af2006c46b04d68663a07e9e676f394e1965b1c111314b7feab33d1
-
SSDEEP
12288:+c30wwsDyLHNVrPknzpTIHnnmIxBRyHbYkObS0dMwvnFHXUQeb1xmkPEc+7KQKWl:fnryZVInUnKHSSTwPF3UQyWc+7Kvnm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c16dd713e5e018d2234eef545c3efd3_JaffaCakes118
Files
-
2c16dd713e5e018d2234eef545c3efd3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VpcWnT0z Size: - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ep0DzmFl Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rFpKHl9k Size: 760KB - Virtual size: 764KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vVm8ldxR Size: 208B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QgFZFh2T Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Vv1RO8d4 Size: 28B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ