Static task
static1
Behavioral task
behavioral1
Sample
c2886fd5f00551e3204d4807106938d6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c2886fd5f00551e3204d4807106938d6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c2886fd5f00551e3204d4807106938d6_JaffaCakes118
-
Size
482KB
-
MD5
c2886fd5f00551e3204d4807106938d6
-
SHA1
8c970ad2889195cf2823cd4c5bc03cef785c5459
-
SHA256
c0be35dfe6ab3e4f1d9901be82cb3f1dafbe106991fd6a7c06fabc27526fe5b5
-
SHA512
55e5ca77438e08e45896bad42c86db5cd8d182c4fadea600991bb9cf764be0a83e794d382d20cff7acf1d0d9b4ddc7f4ef4cdbab57e40c36c85112d0451c5ecd
-
SSDEEP
12288:bZ7opRdwoSf51UJwW+z980qLNirO5ESbXg83n95d/HuLyEI9Spo:d7M1e1Un+zG0qUyR9vHumEIZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2886fd5f00551e3204d4807106938d6_JaffaCakes118
Files
-
c2886fd5f00551e3204d4807106938d6_JaffaCakes118.exe windows:5 windows x86 arch:x86
773d45c1468496235f40d0936a1c1a06
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetServiceDisplayNameA
Sections
.yror Size: 33KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fil Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jyr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dqh Size: 512B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE