Static task
static1
Behavioral task
behavioral1
Sample
2e6b2fd1dee47acc829a4862e818a4d6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e6b2fd1dee47acc829a4862e818a4d6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e6b2fd1dee47acc829a4862e818a4d6_JaffaCakes118
-
Size
32KB
-
MD5
2e6b2fd1dee47acc829a4862e818a4d6
-
SHA1
06c0427a9ef097730800056fc22bd36d6cd3ed99
-
SHA256
434ff8af165674d8e24f8234dcb50f05b37927da5ab8fc7d2cf8c5fe72955fad
-
SHA512
30c6eca6ab194110bc44bbc0f6c344fa7a5a000f07b89fff0f072dda5ba8216c6d121f6b9017e39078bb38e69a4900fac7205ed442babe8603bb72603fa194c1
-
SSDEEP
768:pQvDsuGB2efAY77q6ZL/kV4Cy3jhcb3pf:GLsP22R73TLCme
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e6b2fd1dee47acc829a4862e818a4d6_JaffaCakes118
Files
-
2e6b2fd1dee47acc829a4862e818a4d6_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 32KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE