Static task
static1
Behavioral task
behavioral1
Sample
2683d4046a3dcc3ed7b14ce48e53ac0f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2683d4046a3dcc3ed7b14ce48e53ac0f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2683d4046a3dcc3ed7b14ce48e53ac0f_JaffaCakes118
-
Size
295KB
-
MD5
2683d4046a3dcc3ed7b14ce48e53ac0f
-
SHA1
81e4afc914f06ee344bee75c60d794b444501925
-
SHA256
1dc2999004a01cc5e30749bb284d5eff2cc8a3f8a19f90af4881ddacc7d554f8
-
SHA512
dcd0f52688662a686a2173b9f93cf6c35c0a72030ea6e86ad47639fb0271801513c4c9e53fcce6bc836b8e7d32e86055201ca8a66704acc52135224c4d393c04
-
SSDEEP
6144:uuvSJmgh0I0TZ0MnNDjZqqOyJD6CV+seyyoDI7kH766w8GyeDJn5YE4yB+oS:0FhDMnNDjEqOcDXlPDI7w2wYJyE4yB+Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2683d4046a3dcc3ed7b14ce48e53ac0f_JaffaCakes118
Files
-
2683d4046a3dcc3ed7b14ce48e53ac0f_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
���0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���1 Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE