Static task
static1
Behavioral task
behavioral1
Sample
2c2d2f0d3fcd6b7e3d3a1ec445ef9ac0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2c2d2f0d3fcd6b7e3d3a1ec445ef9ac0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2c2d2f0d3fcd6b7e3d3a1ec445ef9ac0_JaffaCakes118
-
Size
92KB
-
MD5
2c2d2f0d3fcd6b7e3d3a1ec445ef9ac0
-
SHA1
f696918f2a023565f72172f03e895c550d14698c
-
SHA256
159e03dd491d48de12b92b1fa76e16a928dbf46adf350c48b7218113b1596876
-
SHA512
a155acef39efed90a4895d37248a5419f8573b696ef9fb067ab085568d0ca241606ceab4d3037048f286268bb604891af9426b5040b0cbff77b5d07704d48bc6
-
SSDEEP
1536:/+Mj12leWcXA3Uc9NKqlHP/ywfk6gVNu1HvRev/OdcuF8CycKTJe9YT:X12le5i3vHPiupYv/SLF8C4To9YT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c2d2f0d3fcd6b7e3d3a1ec445ef9ac0_JaffaCakes118
Files
-
2c2d2f0d3fcd6b7e3d3a1ec445ef9ac0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
Sections
�ex Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ