Static task
static1
Behavioral task
behavioral1
Sample
2e9a40097025c105471f91f3f09e8461_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2e9a40097025c105471f91f3f09e8461_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e9a40097025c105471f91f3f09e8461_JaffaCakes118
-
Size
384KB
-
MD5
2e9a40097025c105471f91f3f09e8461
-
SHA1
ad21b4d1c0644bca71bccdc330c0d269ac6c5cf9
-
SHA256
dc529713815ea3b7da9ba16ef7e30c173ff70a041e8718e5360d3326dd097288
-
SHA512
e49f317a7fd30b5754ca1c4e6afb636d0458939bbc47538db4ec94dbb078da763d1cb845d018249337793322f6173a06b0146493a81c4a7e67c47f3e73155ae1
-
SSDEEP
12288:IYPI3hf/O/HHkRxUWFdXFa7EFHDvnx73:Q3hFTr2EFHrxD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e9a40097025c105471f91f3f09e8461_JaffaCakes118
Files
-
2e9a40097025c105471f91f3f09e8461_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 366KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 518KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Misswe Size: 380KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE