Static task
static1
Behavioral task
behavioral1
Sample
2c5ecea90de3f61de5cadea87eb5fc15_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2c5ecea90de3f61de5cadea87eb5fc15_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c5ecea90de3f61de5cadea87eb5fc15_JaffaCakes118
-
Size
2.3MB
-
MD5
2c5ecea90de3f61de5cadea87eb5fc15
-
SHA1
027c97ccd391291269152c62fc1f06cdc087f1b7
-
SHA256
d760c384d6469ebdda9b9795c82e6c88e032e2ace0eb9504c51766ffcf149b6d
-
SHA512
7633c026775668f61712fdbed2601c196322a2489f55142b877462b44596c8894cfc06e0d75d440346679ab9836982003ff58be612792c71653a83b0b49c3583
-
SSDEEP
49152:eg8KZFtpIGU7U8kx42EKvHA36CXa4pWTq+RHIZ8C4YlOPsfVRNgP1qQ:ewZrpw784HKvM6p/nRHG8C4YYsfbNgIQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c5ecea90de3f61de5cadea87eb5fc15_JaffaCakes118
Files
-
2c5ecea90de3f61de5cadea87eb5fc15_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 22KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ