Static task
static1
Behavioral task
behavioral1
Sample
2a1612f2165212bc0d34e5f86aa4d5d1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a1612f2165212bc0d34e5f86aa4d5d1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a1612f2165212bc0d34e5f86aa4d5d1_JaffaCakes118
-
Size
336KB
-
MD5
2a1612f2165212bc0d34e5f86aa4d5d1
-
SHA1
8060e2c448e2f67919892e384f1aad160e46638e
-
SHA256
23970d722c7e2eb80fe4e58f39ce6e2d7251eb2f3c691ea526f25fe4f61d0074
-
SHA512
8c75ab6aae968830879e96efc6727be89aaa3c0f5c5007a55bfd362ab2c25ae3a8923b1dd68ddf246441486286975bb35b79c8e4740a0489200b7996f29bf016
-
SSDEEP
3072:LJfqnEn4F4NMjITdYnYOPsY+lK5OdvtpcJO5ZX0A3s9pCSPN4mtpYAwSiG5jdf:lqEn4qpOQWDx5FTtaAwGT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a1612f2165212bc0d34e5f86aa4d5d1_JaffaCakes118
Files
-
2a1612f2165212bc0d34e5f86aa4d5d1_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
drws0 Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE