Static task
static1
Behavioral task
behavioral1
Sample
2a364f3821e552d30dc5aac1efdff6f0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a364f3821e552d30dc5aac1efdff6f0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a364f3821e552d30dc5aac1efdff6f0_JaffaCakes118
-
Size
108KB
-
MD5
2a364f3821e552d30dc5aac1efdff6f0
-
SHA1
dd92f0b0d31f5ee7cb633b4f0c012de55621cfa0
-
SHA256
b574676849e9d0e9afd66ee8e571f5a03d5faf661f2a9d55fcf35561b4df11f7
-
SHA512
09826a9026d68e6cb508594115bd140908ff5e644368afb25d119b8e1154b60acb4e5ad3fad7fab7718de92ca1b6c692d02d3d094eb2beced895e5e37efad61b
-
SSDEEP
1536:OSB6pSPWEUD0lOi7tepjXV0ppODldztX8fmtRGtLL6:OFpSPVOeKjyODlvr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a364f3821e552d30dc5aac1efdff6f0_JaffaCakes118
Files
-
2a364f3821e552d30dc5aac1efdff6f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
��:~& Size: 1B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA