Static task
static1
Behavioral task
behavioral1
Sample
2e82316fd4d4fef35a0c4c40a63eccdb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e82316fd4d4fef35a0c4c40a63eccdb_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e82316fd4d4fef35a0c4c40a63eccdb_JaffaCakes118
-
Size
75KB
-
MD5
2e82316fd4d4fef35a0c4c40a63eccdb
-
SHA1
e4a3c392bb7af8576a3e70e14064063b9ba304f1
-
SHA256
358610701c7203fe527f3b184bd6649b3bef420fcc4ac67904e670cd9647eb89
-
SHA512
2a7d53d9e363680785aec3005be0235e814c8d6484cdde6123d834cd35515d572687fdbbd10730b836c15c7d0f93b3dce94a71350d8bfbcb4b2f9bfc2d5aa903
-
SSDEEP
768:My55LPGKoBwd9ctO1mrQdrbSO5r6DBzGhFcP9YnwtRovWFu9U71ddZ/PXUFS5k/A:qJwn11br6DeF2+wtRovXU7B6F8k/EPF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e82316fd4d4fef35a0c4c40a63eccdb_JaffaCakes118
Files
-
2e82316fd4d4fef35a0c4c40a63eccdb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.iDAta Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.IDAta Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RDaTa Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bSs Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.TEXt Size: 5KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ