Static task
static1
Behavioral task
behavioral1
Sample
2c9a01ce18a1c14c2036bcd99cf91413_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2c9a01ce18a1c14c2036bcd99cf91413_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c9a01ce18a1c14c2036bcd99cf91413_JaffaCakes118
-
Size
16KB
-
MD5
2c9a01ce18a1c14c2036bcd99cf91413
-
SHA1
c38902bf1f0b969a18fe0dc8e305435c2ba08cd3
-
SHA256
b36fd923ab93295e30c5f8b8c9e3a8a2f30940f1f96b25e5166a895e3dcff2dd
-
SHA512
2ebd88063c8f6a26467a0fec9ab17f4840d000e86712007768ca30cf39ec53fc4fae509bc00d4ce1ba54a65b5f86ee7c4ef117edeec4ffeb979163d01221e646
-
SSDEEP
192:HtkDejZPMfAL9Jhhd61+lAvuI1MsBitm4GHkzymjw1QbYgAQ33yFBGbVfcbN6QP9:IeZMoL7x++IbqmedpAQyF0bpI6EvAc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c9a01ce18a1c14c2036bcd99cf91413_JaffaCakes118
Files
-
2c9a01ce18a1c14c2036bcd99cf91413_JaffaCakes118.exe windows:4 windows x86 arch:x86
efde246d3fecb4db9bf89c79d184d9ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DdeQueryNextServer
Sections
Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE