Static task
static1
Behavioral task
behavioral1
Sample
2ca30ae5fbbb7b17a52871e03102fa98_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2ca30ae5fbbb7b17a52871e03102fa98_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2ca30ae5fbbb7b17a52871e03102fa98_JaffaCakes118
-
Size
5.9MB
-
MD5
2ca30ae5fbbb7b17a52871e03102fa98
-
SHA1
bd0b99111f27e08742f1761226210f7f076fe4a4
-
SHA256
12ea2dd5b6cf0c8ad7f5c8c89e069f672f3986c5d7a692d45024ec6e51dd68d6
-
SHA512
294f3c93c8a221e91cdc667f69b191b784be0231a806a9afdd0b0674f69fec70968cd6f98485d03b7bbd2772492ef684b0f4f899146d50ca8c05fe5e4662fd46
-
SSDEEP
98304:FyKvcgXvKUrpVwrslIvdS/WEj+ek4dDVe0LFzoUCeAffT7WGYmINAAX9kFemonRc:FyZgXvKUrpVwrsl4SWEj+ek4dDVe0LFZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ca30ae5fbbb7b17a52871e03102fa98_JaffaCakes118
Files
-
2ca30ae5fbbb7b17a52871e03102fa98_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ