Static task
static1
Behavioral task
behavioral1
Sample
2ce95a149f7893425dce46a6a1edadcf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ce95a149f7893425dce46a6a1edadcf_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ce95a149f7893425dce46a6a1edadcf_JaffaCakes118
-
Size
20KB
-
MD5
2ce95a149f7893425dce46a6a1edadcf
-
SHA1
23ba32d9244c0b8bac4a4767e890f691848287fb
-
SHA256
1018e06edc2686cf580e346d610510d872b4ef71eb54f0239064c8f60a5d1bfe
-
SHA512
35ea6407483651a14f3cafe853725d3422bb9fb90d9e00e0b261df604e447e0476327b04943ccb2e7d1d034d84ec6608ad8e494b0f0209972f82ecb9a81838dc
-
SSDEEP
384:FjGvORnFWNoR9+LhrzPcwrkF/UR5pZazAhLG1THgMXak8Pj75nG:A7Nk9+F5Ee56MIHdh8P3R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ce95a149f7893425dce46a6a1edadcf_JaffaCakes118
Files
-
2ce95a149f7893425dce46a6a1edadcf_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
���ӝ�7� Size: 15KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
G�p��{�� Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ