Static task
static1
Behavioral task
behavioral1
Sample
2d8c7697f31d592c9660e0dd91ad2c3c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d8c7697f31d592c9660e0dd91ad2c3c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d8c7697f31d592c9660e0dd91ad2c3c_JaffaCakes118
-
Size
13KB
-
MD5
2d8c7697f31d592c9660e0dd91ad2c3c
-
SHA1
41ad21a6d5a60933deb088049e4df0214e62ebb0
-
SHA256
fa222d6cb0508fc9801d7c58f12c41c40519df39ec9e6efe11eba7c2e449388e
-
SHA512
53fcbf266d29846c2662e901c0fe1a7c454b612f880d342855cdc116198a58872eb174ccaf0c9baa80390a2bc5b965082f9c79da72e2de6338dd9a65fbd8707f
-
SSDEEP
192:q1MB8ePpNGYD6rM//afrzZJSEqltJ/6HuaHNhb4YObS5usSkODtei7:RB8ID6rRDavlzSHuaHNmsSBYi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d8c7697f31d592c9660e0dd91ad2c3c_JaffaCakes118
Files
-
2d8c7697f31d592c9660e0dd91ad2c3c_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ