Static task
static1
Behavioral task
behavioral1
Sample
2acf66cf955b0278d1d6e2f4800bbe31_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2acf66cf955b0278d1d6e2f4800bbe31_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2acf66cf955b0278d1d6e2f4800bbe31_JaffaCakes118
-
Size
104KB
-
MD5
2acf66cf955b0278d1d6e2f4800bbe31
-
SHA1
2b17ebd328110861c7205fe54be0d0dc4037cde4
-
SHA256
78f7476d2ea47eba3746683f763829ffc77dd2f7034315eb410ec3498064bf9f
-
SHA512
f168608154492468a8df637a0cbe5e2c173e797b1908af04d34d6a1259c05c424053aba18e5253beeed6f2163e45c84830f63005daace886bd0bd67c8f20f757
-
SSDEEP
1536:Zx12znb6YCrUPyfYvnwHsvjDxgPlovSEMrE0eq0IULf9o2MldGYJK8g:b12znb6YMqwHs7DxgeSJQpLfi2MTDKH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2acf66cf955b0278d1d6e2f4800bbe31_JaffaCakes118
Files
-
2acf66cf955b0278d1d6e2f4800bbe31_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�text Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.heXlion Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE