Static task
static1
Behavioral task
behavioral1
Sample
2c0370397e49f1ef74ca634914eb7351_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2c0370397e49f1ef74ca634914eb7351_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c0370397e49f1ef74ca634914eb7351_JaffaCakes118
-
Size
18KB
-
MD5
2c0370397e49f1ef74ca634914eb7351
-
SHA1
a2c6a4fe0fcb2aa82878795620fa6899fe7ca63e
-
SHA256
5e44d95be66d013d0345e45414517a8176d391aa8df97383ecdada584b7c5083
-
SHA512
98d9046db2cb55bd84e1767f1d505feff226c33c8f22050c2e70f4ca2b9fe185dac2ec0e6e683c64e4343d561fb3191803b4f2a9cde159092016584b5f897966
-
SSDEEP
384:p3wARuYZu8YUVAuLewblEN9CN6VxKbLAz+0+uH9lA9:p3j4x8ppLeelE6ImYK0hHTA9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c0370397e49f1ef74ca634914eb7351_JaffaCakes118
Files
-
2c0370397e49f1ef74ca634914eb7351_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: - Virtual size: 259KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ