Static task
static1
Behavioral task
behavioral1
Sample
2ff024299481e0dff1c8af4d9879e8e0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ff024299481e0dff1c8af4d9879e8e0_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ff024299481e0dff1c8af4d9879e8e0_JaffaCakes118
-
Size
16KB
-
MD5
2ff024299481e0dff1c8af4d9879e8e0
-
SHA1
aa7f491f53095d9f62ef1a7dc73b7427829b0d4a
-
SHA256
aecfb2f94c040e91e35e0a634678b6b2a3416057b5446804dec314338390b678
-
SHA512
685623a8bbe5e8e68b743a4dc267e2e847b60f0be3a85ac88cc9b2843a1f1cf17b7213f2abad28e53ce8c9c18c5958fd4583d0cb45ddd8166aee78b2e64d4d76
-
SSDEEP
384:3ls2vDyfmYLY5LDoySe1zemM4kICXymkPxmYd+BlsCBsgnDa625v:1s2ymr5LDoyS2Kr4YRkP3IlsKn/K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ff024299481e0dff1c8af4d9879e8e0_JaffaCakes118
Files
-
2ff024299481e0dff1c8af4d9879e8e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ncph1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ncph2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KK Size: 512B - Virtual size: 520B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE