Static task
static1
Behavioral task
behavioral1
Sample
2ac83879b6d79cb3c9e19985f3e4e5f5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2ac83879b6d79cb3c9e19985f3e4e5f5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2ac83879b6d79cb3c9e19985f3e4e5f5_JaffaCakes118
-
Size
44KB
-
MD5
2ac83879b6d79cb3c9e19985f3e4e5f5
-
SHA1
5e3236d59e88102489803d0d7d7129b3a132f31c
-
SHA256
123ad3489600382d4d71680689b84a076c643ec5b8750ad131f9ae7183233bd3
-
SHA512
e38430a4159ce5ac6b9a7a3a3a63c0a32950ae7d18eb1875b8f05f503aeb27efc9e54c8679336ea4d59391b91571e07f39beb8e654902c42f6631397adce5412
-
SSDEEP
768:oHGUybdwHyyLY47ucRuc6Biz/mVMk28ys4L:om3KyO7ucZ6B0/m+rL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ac83879b6d79cb3c9e19985f3e4e5f5_JaffaCakes118
Files
-
2ac83879b6d79cb3c9e19985f3e4e5f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ