Static task
static1
Behavioral task
behavioral1
Sample
2d5f6d4fd26079a7d4b5e5373d1cdcf3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d5f6d4fd26079a7d4b5e5373d1cdcf3_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d5f6d4fd26079a7d4b5e5373d1cdcf3_JaffaCakes118
-
Size
17KB
-
MD5
2d5f6d4fd26079a7d4b5e5373d1cdcf3
-
SHA1
82b542226bc94524b9ba338847c870fc2a18a7cf
-
SHA256
8167f456cf614a5aa5f5b6b14c2f12cc8d5cc931a220612466a427e510f3c611
-
SHA512
ecb142b7bc6749216a706407e041e7e2f276c6f41f63f51910369628be818d77584ea43ed386696af20dbe86fe1efcab3b3905cc879eb1c7b5914db39f8b519a
-
SSDEEP
384:m6W/WMLevGOufSm+J3iewanl5Xg2ynBQU3PsV+FSs4DM8uvinBTm:hvy/03ieJnl5ZynOUUV+FSsVo1m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d5f6d4fd26079a7d4b5e5373d1cdcf3_JaffaCakes118
Files
-
2d5f6d4fd26079a7d4b5e5373d1cdcf3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
;zg0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
;zg1 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
;zg2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE