Static task
static1
Behavioral task
behavioral1
Sample
2edb279e781c3ab031a62c0e6cc585fe_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2edb279e781c3ab031a62c0e6cc585fe_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2edb279e781c3ab031a62c0e6cc585fe_JaffaCakes118
-
Size
70KB
-
MD5
2edb279e781c3ab031a62c0e6cc585fe
-
SHA1
d2b30e727093f11a609918d50557c9655c4bc9ca
-
SHA256
42469e205d78cd9e60d5734ce8261d1a223fa76915cf87ab0a8de249576326a4
-
SHA512
54f653c0b77ccb0bd43427e464ee7b6865f4183c675823756e146c3ff337a73d57a2d9138b002e2b61dcfc418c58f8860bfcbffadb3be5ec890b09a03d5baa72
-
SSDEEP
384:AGwCPb0YVLWU+sLbqbdHHXk6wcHXpeUmsXpP0L0uKnFuG9yIaqju6tTAI2Jm:AGzPrVLX9iJ3TrHXhdXauFJ8SHRH2U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2edb279e781c3ab031a62c0e6cc585fe_JaffaCakes118
Files
-
2edb279e781c3ab031a62c0e6cc585fe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 998B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ