Static task
static1
Behavioral task
behavioral1
Sample
2c684fac93a3875a7af43aa52018e4c7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c684fac93a3875a7af43aa52018e4c7_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c684fac93a3875a7af43aa52018e4c7_JaffaCakes118
-
Size
185KB
-
MD5
2c684fac93a3875a7af43aa52018e4c7
-
SHA1
187f6f53d0ceb79477256a4dc95ee160256ffa3b
-
SHA256
d458705ee0e9f3516ccbfcf5c6d6a8009df59874f2becd0b0a924de5dbc8a7db
-
SHA512
5b698c40c0392cc6a65dbe0fd51bcf8c2dc501bebf02f475d557ade81b80731dc9b3a8f595cc31b4bd8a14b1d07b8b19b2476d3a82fa5db3f6acb8a2eadb9451
-
SSDEEP
3072:FAOQ7lfKPfEvx53GIO0AUmN9zJB4pIc4ryDyzl+GvKNVIhfaV3hDA:9GlqEvx5/etBRcqyvGvKohfy3+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c684fac93a3875a7af43aa52018e4c7_JaffaCakes118
Files
-
2c684fac93a3875a7af43aa52018e4c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 209KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE