Static task
static1
Behavioral task
behavioral1
Sample
2c21aa9847aa5d1567373adb7f0080e6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2c21aa9847aa5d1567373adb7f0080e6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c21aa9847aa5d1567373adb7f0080e6_JaffaCakes118
-
Size
164KB
-
MD5
2c21aa9847aa5d1567373adb7f0080e6
-
SHA1
da827b46513e6163bb8b8f04660784fe8262b326
-
SHA256
d34a1c8bde840f85861acd52b7d011776c87b002b6969e2c4ba1e1460ad71cd2
-
SHA512
8d5570b063d59b014fe9dc86bc261c0387793bdfcb5093a49b3d1f8851f2342a2fa13977cdb30ad80e9b0d658b430a7d161b098db5fbc665b6d5a5f2c78c6a30
-
SSDEEP
3072:Ij2ZPzOkkfa7o6ElFVdr+LBNGT7avQE62LCGLvevvIqPre:jPzl5VLSiQML77aDe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c21aa9847aa5d1567373adb7f0080e6_JaffaCakes118
Files
-
2c21aa9847aa5d1567373adb7f0080e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mackt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mackt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE