Static task
static1
Behavioral task
behavioral1
Sample
2c23e16180d7f35365063f8a25bdc643_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2c23e16180d7f35365063f8a25bdc643_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c23e16180d7f35365063f8a25bdc643_JaffaCakes118
-
Size
432KB
-
MD5
2c23e16180d7f35365063f8a25bdc643
-
SHA1
b29195c89d03191b32d19f5abf285cef15dd6ffa
-
SHA256
3750a95c5f40db16194479d011e3839ca205bd72e98cda8c7ac0ec39ea163268
-
SHA512
3a3dd510359cc9eb895020685e79be67aeaff0a6312a4bbedc7b209f4b5177df6135171c39dabda08f495751e349a6fd9ec23cb32ae1b03e60d5d2287c427573
-
SSDEEP
6144:HKZbnY5BLsBNfbipM7q5xKf6RjLI8osdW5J0mLC5P5P5058RgPvSCsDr3rZlmS:qZGBsPcMm5Zx5RSHsDrr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c23e16180d7f35365063f8a25bdc643_JaffaCakes118
Files
-
2c23e16180d7f35365063f8a25bdc643_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 204KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 13KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adat Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE