Static task
static1
Behavioral task
behavioral1
Sample
2ff9ff17b7ff5338829a3f237b2c5781_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ff9ff17b7ff5338829a3f237b2c5781_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ff9ff17b7ff5338829a3f237b2c5781_JaffaCakes118
-
Size
9KB
-
MD5
2ff9ff17b7ff5338829a3f237b2c5781
-
SHA1
18dbe084a1f9b9eef61c2126c05e410ebe931732
-
SHA256
7f8962db00aa410710eb2c49629473f952c7b9930a1d1f03a4e39afe524b0685
-
SHA512
80fb534060896383c53e22d0c59d67ff20fa9b674b01688a41ecf72e0bb9b585814fccaa3b4d036aa023802d3265ff59b8b17194ceb3ef5a4e2df08b0fc86e73
-
SSDEEP
192:Lv5AZl2WVAfNxl1THs3xgzg1GjPlRnL766nQAzX:Lv57BxDTHyxmZh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ff9ff17b7ff5338829a3f237b2c5781_JaffaCakes118
Files
-
2ff9ff17b7ff5338829a3f237b2c5781_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ