Static task
static1
Behavioral task
behavioral1
Sample
2cac558e7d8e05fd8c6df8583c99d28f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2cac558e7d8e05fd8c6df8583c99d28f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2cac558e7d8e05fd8c6df8583c99d28f_JaffaCakes118
-
Size
64KB
-
MD5
2cac558e7d8e05fd8c6df8583c99d28f
-
SHA1
bb3aff59a5330d952424ac747118ab219a3c3c6a
-
SHA256
5789222f5b7a7649b99449de94dc16a298dbd4dd1c79630d4bcb2378a166d9d6
-
SHA512
dd9af9aff0f118a4e43779d4fbdfad8cccffabb0be4c6414417774d4f4d722ab48c2c0680688b314c84b4578bcccbed675a919f39ee0efdcb43e57c91eea1d3c
-
SSDEEP
768:MJlnQuQJyjogOjQzrBTLkvkEnaE6lUFVfRaotf76/KqNFTrsi79+CmKpJyA:MxQICOikUZV2FVs29+CvpT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cac558e7d8e05fd8c6df8583c99d28f_JaffaCakes118
Files
-
2cac558e7d8e05fd8c6df8583c99d28f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
. Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE