Static task
static1
Behavioral task
behavioral1
Sample
2c696a632ea45cc7c38b03cf36359875_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2c696a632ea45cc7c38b03cf36359875_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c696a632ea45cc7c38b03cf36359875_JaffaCakes118
-
Size
27KB
-
MD5
2c696a632ea45cc7c38b03cf36359875
-
SHA1
4ca138fc368533f5e30b0d9ce64c80bb03e5bea5
-
SHA256
667bb6254b9daf73af11159be437dc3dd0965aeaf16f99b4470f015c9db3b301
-
SHA512
51d18a36ef522ebe9314888050b726d7e1d9281c384fe3d3642afaba4b36ff6ac7b40626aaac4c2d5d32b22968df1db8b3aa98fa115339641eef588e35b5a505
-
SSDEEP
768:Z3wKd+69mY3yBwjV6UIYMKxlafdOq3fY:W6MY3lfIsKfdOqP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c696a632ea45cc7c38b03cf36359875_JaffaCakes118
Files
-
2c696a632ea45cc7c38b03cf36359875_JaffaCakes118.exe windows:4 windows x86 arch:x86
d76f4237a8ae158292f09835997a1d9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
Sections
-���Iϲ Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
8K��<S�� Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�'N�R�' Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ