Static task
static1
Behavioral task
behavioral1
Sample
2cc67eaad86761d893183eb3fcc5b4d9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2cc67eaad86761d893183eb3fcc5b4d9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2cc67eaad86761d893183eb3fcc5b4d9_JaffaCakes118
-
Size
20KB
-
MD5
2cc67eaad86761d893183eb3fcc5b4d9
-
SHA1
5295e50f67186f64f08e00ee60ba0350fdb29d1b
-
SHA256
c37b6c9e270cf6664cd02927290c5d7c2c7fb75623cb65c0f7a5f2cb3f580d87
-
SHA512
ae330519c92dbb2b2fe30d056d2abc8a4d0a60b8cd6aa04f94be6d8c524b9176b5c422165bc8dc4dea8d7fd4fa5e5de43b4fa21b8a765ea5e341ef39e69458ec
-
SSDEEP
384:CvJMg+YicR1Fg1NQboEmdk0+sg6pZfzAUklZHf4AbD5CdlF6Nw0lmRIdH:gMrczFKe9mdwd6v8U2ZHf4wofF6hloG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cc67eaad86761d893183eb3fcc5b4d9_JaffaCakes118
Files
-
2cc67eaad86761d893183eb3fcc5b4d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 506B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE