Static task
static1
Behavioral task
behavioral1
Sample
2b066fd15bb543def6c3fb5eec5d3ba6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b066fd15bb543def6c3fb5eec5d3ba6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2b066fd15bb543def6c3fb5eec5d3ba6_JaffaCakes118
-
Size
47KB
-
MD5
2b066fd15bb543def6c3fb5eec5d3ba6
-
SHA1
8049a9be80c705397c36d9014f96b25492a713b6
-
SHA256
6a0a6f3bdb00f24941236b8b70000918be597b83e1fbf0bfa31a62c83acbee8e
-
SHA512
fe43eac45f872021611808057e9a73d03f4ab8bb14fc02ce24204a0fb39825b32a772b927f664bb17c91efe08ac0f4fbebfddac4bf786fc604209f88920139cd
-
SSDEEP
384:EKLjFiOvlQCyGv/lHO7TU+iHWnJJ10z9OEp/srxQHtnl6xQh3QM29Uvw0Epfm:EURiT7TU+iHK9S1sr+dl6xegM29X0E0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b066fd15bb543def6c3fb5eec5d3ba6_JaffaCakes118
Files
-
2b066fd15bb543def6c3fb5eec5d3ba6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 382KB - Virtual size: 382KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ