Static task
static1
Behavioral task
behavioral1
Sample
2dca2b87431bbd31da5ebbe01a2c349d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2dca2b87431bbd31da5ebbe01a2c349d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2dca2b87431bbd31da5ebbe01a2c349d_JaffaCakes118
-
Size
390KB
-
MD5
2dca2b87431bbd31da5ebbe01a2c349d
-
SHA1
084514b0071d152527dd35ed6ad40b482a90aa04
-
SHA256
4e4e8b2be90fe0a0b6506deaa4f45ff7cc75f2c1ae586777b4f150969a46a726
-
SHA512
3be4cc9fc5b4da4859582ed743ac5fc2fab491789fd0dd6feab09e846b04a04eaad8ca5f2692d2b1b9fb43426545b31ed9f87af05d18ddca735cc0aa21a16b5f
-
SSDEEP
6144:3wUOYyUWm4mRSQAs6H+cK8aLV8isT+TttbkpuYi8miU7m3FOJAePlK8Lib:AUOYyUWuNXmKPOXqTtf8+7acfdyb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dca2b87431bbd31da5ebbe01a2c349d_JaffaCakes118
Files
-
2dca2b87431bbd31da5ebbe01a2c349d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ