Static task
static1
Behavioral task
behavioral1
Sample
2ae407fda98cbd3c56b88c289a46fb4a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2ae407fda98cbd3c56b88c289a46fb4a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2ae407fda98cbd3c56b88c289a46fb4a_JaffaCakes118
-
Size
46KB
-
MD5
2ae407fda98cbd3c56b88c289a46fb4a
-
SHA1
e56c5b5d23abb05ca0d9694e331f47cac864a14c
-
SHA256
a3207e0f54a49aa31d260a6a1d766e77239fa9e999ecd781aee180be215bea4c
-
SHA512
055860efb4e1006a05c1a590154f70f6cc5273cce19490657a0bedd17c00cbb1090124b9676798c47ad77dd23b00d394ad9461921bdbcc8005d978300418c18b
-
SSDEEP
768:lyKG6ZYDCDj6n/A9VCr1kKm5HKYCxw0HPKsMffbbfl56q3NkMZ3sb:oBDCDUmkM5H981GPl1myy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ae407fda98cbd3c56b88c289a46fb4a_JaffaCakes118
Files
-
2ae407fda98cbd3c56b88c289a46fb4a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 79KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.teraphy Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE