Static task
static1
Behavioral task
behavioral1
Sample
2e6f4ae414f0fe2f2c7afff1c8df0b37_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2e6f4ae414f0fe2f2c7afff1c8df0b37_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2e6f4ae414f0fe2f2c7afff1c8df0b37_JaffaCakes118
-
Size
3KB
-
MD5
2e6f4ae414f0fe2f2c7afff1c8df0b37
-
SHA1
b12e364c0a417e9f49e0c3ed53fed5cb4c50e40a
-
SHA256
8c731a4af901f5494714db64f553fabe45f7049a04335ccfac64de255f763a15
-
SHA512
478b5c142cf26ffd99f6644810f43a27ced85fccef285a1304739c4b5b9c9c2934ca94fbdbcb3c5a4e7b6a6aa6f0c2dfd2aba7361c88caf3993b1248c598498f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e6f4ae414f0fe2f2c7afff1c8df0b37_JaffaCakes118
Files
-
2e6f4ae414f0fe2f2c7afff1c8df0b37_JaffaCakes118.exe windows:4 windows x86 arch:x86
175eece3656ceeee44a6ff2944e7707b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
wsprintfA
Sections
.text Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 166B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 42B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdx Size: 354B - Virtual size: 354B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ