Static task
static1
Behavioral task
behavioral1
Sample
2aa3d8a2f31f4810c97390148336cdae_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2aa3d8a2f31f4810c97390148336cdae_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2aa3d8a2f31f4810c97390148336cdae_JaffaCakes118
-
Size
1.4MB
-
MD5
2aa3d8a2f31f4810c97390148336cdae
-
SHA1
0dfc3894e17b8a0cfcb91c4ded0730be38db7235
-
SHA256
375bdca814f00aa0aa9ad707887ee661b67c912245b48958af63e010fcce6296
-
SHA512
dba20343863be119a3824681249f0cb160b15781ea67f976bb9d7b1dbfe1c7f033f1e8ed64e492432be42129e8142e0c95cf99a6391d41ec07c426e19d4c7c9d
-
SSDEEP
24576:Y1MrZEGCNiKWYHzXV893bK6TVnHV4TUYyHuYx/8rGIjUknkE4Wd2ginFFG:MM6GCE+VihRCUOQ//ip/4u2ginFFG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2aa3d8a2f31f4810c97390148336cdae_JaffaCakes118
Files
-
2aa3d8a2f31f4810c97390148336cdae_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 286KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ