Static task
static1
Behavioral task
behavioral1
Sample
2878ee680c437e16437536ed5dee4122_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2878ee680c437e16437536ed5dee4122_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2878ee680c437e16437536ed5dee4122_JaffaCakes118
-
Size
375KB
-
MD5
2878ee680c437e16437536ed5dee4122
-
SHA1
b48effbaa3d3275477c3e808483ea2a286135c7f
-
SHA256
e0aca1869a45d0215fccdbfabcc330e967e0ec3214a618a26057af9840fb3909
-
SHA512
b0ce97a43dc448431713864a6f46d642b5b1bce075c548a521cadde31cee6b019d2f61313c5015699e08db179a086378e6d25be3c7385064879b4f7f91fc9524
-
SSDEEP
6144:7E6VEESaLaEF87k4ltvPlz8RA2vgMKW0wDr8Yr1cvFh71Jacn:7EdESauEn4lNJ8RA2VRd+VJaM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2878ee680c437e16437536ed5dee4122_JaffaCakes118
Files
-
2878ee680c437e16437536ed5dee4122_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 444KB - Virtual size: 442KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ