Static task
static1
Behavioral task
behavioral1
Sample
2dc7438a3d45d96a4d4c426829dae08b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2dc7438a3d45d96a4d4c426829dae08b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2dc7438a3d45d96a4d4c426829dae08b_JaffaCakes118
-
Size
153KB
-
MD5
2dc7438a3d45d96a4d4c426829dae08b
-
SHA1
4789403c46054fe8b99f6d2cd617e3cfa33e30d6
-
SHA256
175ad0f796a93567d55bfeb22c50ce970ac0cb8e9cfe5a1c7890efb162de5169
-
SHA512
8ecfb8f4243cb2fa960b37241dceabdb670d46e771c79fc91602aaa12dc7f7567f426aeb1bbc7813bd07d48431ec9a34f29f9e667df33ae1e1fd33a7ef8b4f7b
-
SSDEEP
3072:7c2Y1+OwZy66/JeuAnwwwJ06U53IESz3K0jAZ4saY7ToHTvcOG97OiDJs:7m1+J466/Q3nwAzSzI4sL78HTvcOuW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dc7438a3d45d96a4d4c426829dae08b_JaffaCakes118
Files
-
2dc7438a3d45d96a4d4c426829dae08b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 152KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE