Static task
static1
Behavioral task
behavioral1
Sample
2c043d0a4a3550f70fe035f5d12b3b20_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2c043d0a4a3550f70fe035f5d12b3b20_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2c043d0a4a3550f70fe035f5d12b3b20_JaffaCakes118
-
Size
910KB
-
MD5
2c043d0a4a3550f70fe035f5d12b3b20
-
SHA1
5e1b5abe8774494d605947451cc0e6a83c353478
-
SHA256
ab78828f4012b5b469dcde1616c580cf0232839c921ff605ca2d93533a025364
-
SHA512
0d3396511b233063cc8dffbef3a52d7a6a82a7589c3eeecb8fba14885a1df71000a18811a516483af3acede1b033f776b302f6af9d63ea0417ca3b2b01a59fe9
-
SSDEEP
192:450kpaemVQOtuz0gYzsXZPrDPIB4XN8hFCa+xaZy0pNVxZJGiRriz9UCrLxWvM:ypa/HQK2ZTDPS4+SaZbbV3Iyriz6C4k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c043d0a4a3550f70fe035f5d12b3b20_JaffaCakes118
Files
-
2c043d0a4a3550f70fe035f5d12b3b20_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
PV�h�i�� Size: - Virtual size: 240KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
,�pZ��F Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE