Static task
static1
Behavioral task
behavioral1
Sample
2e6c9e719b842e2fb2facd626870f70b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2e6c9e719b842e2fb2facd626870f70b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e6c9e719b842e2fb2facd626870f70b_JaffaCakes118
-
Size
123KB
-
MD5
2e6c9e719b842e2fb2facd626870f70b
-
SHA1
e4cbae70938583e360a8773044c1cd0afd72f55a
-
SHA256
9f72a7fd222c473a72b1fce2a4b68147fa62dd9d48e229ccb0a136ed399f6d90
-
SHA512
c5e6b994d812fb6340ba0578134401c57b65a1a557b051b08555421d2fdf16298a4bf7be452745147aba6597c9a72beb52fd8bbef29b43b5f5ab7c3d852ff5ad
-
SSDEEP
3072:009/U5nElN2JQl/YLlV5rPFAAFHpp3O6QlnjN:xmpElKgwZ3trDEjN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e6c9e719b842e2fb2facd626870f70b_JaffaCakes118
Files
-
2e6c9e719b842e2fb2facd626870f70b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE