Static task
static1
Behavioral task
behavioral1
Sample
2cd7f8207f90ca6c831a643fbe419ab9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2cd7f8207f90ca6c831a643fbe419ab9_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2cd7f8207f90ca6c831a643fbe419ab9_JaffaCakes118
-
Size
13KB
-
MD5
2cd7f8207f90ca6c831a643fbe419ab9
-
SHA1
09b4ba4b6f75487c91faf18bc05ce62a7bec36b8
-
SHA256
bf205b6d8b7419e314bd67245a1fa998e9cb46c860f251af8b8bf86b0f87e9b5
-
SHA512
4614a3a332fbcb7cbeee77dbdbf05051cc6b1ffe3f09e5fd46a5d0ebbaf50ca101ec0e27cf812c0495e26d880b6fe7d7904a38d200bb82e03b2b38146b896127
-
SSDEEP
192:6Wz76Nrs/dPUeFq7R/UF6w7N+Sir8AfSR7jYPccIkeoqImJuvlOlzbKtblkoTJ:X76N4dPUemR/ZwcSOf2sYkLuuMlKHk8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cd7f8207f90ca6c831a643fbe419ab9_JaffaCakes118
Files
-
2cd7f8207f90ca6c831a643fbe419ab9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE