Static task
static1
Behavioral task
behavioral1
Sample
2d4fb5111178394cd0e0ab4624c931e1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d4fb5111178394cd0e0ab4624c931e1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d4fb5111178394cd0e0ab4624c931e1_JaffaCakes118
-
Size
1.3MB
-
MD5
2d4fb5111178394cd0e0ab4624c931e1
-
SHA1
e4b2c56739659e6de24e2eaf39cb59f6cd4e623a
-
SHA256
d4e9c4dbc6163cc7c3af365e72c42c7f967f0310bb57b498812e94b2ec712fc5
-
SHA512
2387d3a95e0f58705bb8e0ac7f552be43abb04c4eb3892925b2d13775057736e52371d799b74700b9f0841a9d8f0b581c99da6352d1944545ecedb8887998753
-
SSDEEP
12288:1L+/snEsYJB4bq8iyarwDap7EiUDsZNEIzR/VCP5qWT/fBm6OjUlKoykIWo8JBtf:FssEsYJB4bqu47zbExfT/5mTuIWo8F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d4fb5111178394cd0e0ab4624c931e1_JaffaCakes118
Files
-
2d4fb5111178394cd0e0ab4624c931e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 784KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SCODE Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
SDATA Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mackt Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE