Static task
static1
Behavioral task
behavioral1
Sample
2c430cd5a3f4955f2ee7736c0c27c913_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2c430cd5a3f4955f2ee7736c0c27c913_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2c430cd5a3f4955f2ee7736c0c27c913_JaffaCakes118
-
Size
20KB
-
MD5
2c430cd5a3f4955f2ee7736c0c27c913
-
SHA1
30c1520b0447bbe3a82e909831cc65fe66232a72
-
SHA256
ef988d204d51be45aa8425a07faad404c876e8fac222af30de974e0348893223
-
SHA512
3fa72b4a70898e2ca7061032e4371dcfc9f69ff48c7feda5d93fd8124d64b9542b3f7165470bee9d2dbf9a735cb5b7d6da9218e0f29b4ed975e2377090b29273
-
SSDEEP
384:OWMkeYE31kZq+y8w4r26ZFizT6gOZCazolVhKbKd2C3Qf:nTK1kQ+y8w42SI6gZ5xXwCg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c430cd5a3f4955f2ee7736c0c27c913_JaffaCakes118
Files
-
2c430cd5a3f4955f2ee7736c0c27c913_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��� Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE