Static task
static1
Behavioral task
behavioral1
Sample
2a6c9ae99ad6555e640abf43e55ad78e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a6c9ae99ad6555e640abf43e55ad78e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a6c9ae99ad6555e640abf43e55ad78e_JaffaCakes118
-
Size
1.5MB
-
MD5
2a6c9ae99ad6555e640abf43e55ad78e
-
SHA1
6e2bb9bbb279c102bdc2437cd8fe3aa192960e9d
-
SHA256
0244ed0fc4326cd2c7089283fe1a896d62f2219a6191538934ba8c43074f8ab0
-
SHA512
cf1115cab4b7079ecd872b2cde18f7e83aadb4d75f11ca3056e09d2eb0875e70844430e3aaea7d1133c22b6ddc37f10a801e66efca94ec1a483e0c655ab780dd
-
SSDEEP
24576:mQL3ih5iMz3hRUZ8lz9I+65vE+4HO6ZO/dcVtXRKQTs2jBkL7ClC0IF:o59RU4zq+svl4Fc/dgxRrseBI7C3IF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a6c9ae99ad6555e640abf43e55ad78e_JaffaCakes118
Files
-
2a6c9ae99ad6555e640abf43e55ad78e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE