Static task
static1
Behavioral task
behavioral1
Sample
2cf8ea8cc26073966a5bfc24b815d9be_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2cf8ea8cc26073966a5bfc24b815d9be_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2cf8ea8cc26073966a5bfc24b815d9be_JaffaCakes118
-
Size
1024B
-
MD5
2cf8ea8cc26073966a5bfc24b815d9be
-
SHA1
2260d4a0d577136cbc637ee8e70d66b7476ea4f0
-
SHA256
5868c46b0c524fee54a6ac69395f36d9177a0d6441e4a4f418137817bb17c19f
-
SHA512
21686837ad0271b14aa43573d40170471993d1d80c5c1de61cb7340fb7ceb58a11f7e58f3a136d5bbe50ca1b488d7409d4467f5c2b29b54b0fb830ac36ad6fab
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cf8ea8cc26073966a5bfc24b815d9be_JaffaCakes118
Files
-
2cf8ea8cc26073966a5bfc24b815d9be_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE