Static task
static1
Behavioral task
behavioral1
Sample
2cd4ff0f6ddf573af986c3f793f70d87_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2cd4ff0f6ddf573af986c3f793f70d87_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2cd4ff0f6ddf573af986c3f793f70d87_JaffaCakes118
-
Size
236KB
-
MD5
2cd4ff0f6ddf573af986c3f793f70d87
-
SHA1
ba18707ba8313d527efb51890211ac84b7b64741
-
SHA256
a273ba067cd50f062a52dfefc64cd56c70d2bf00097961071990449a9bd5f6d2
-
SHA512
d04b63603995ceb1e1b1aa1e03f6e5e82cc6140ab3ad4b1513a7d60569dea48df6d4f8741ad8e185ba358fe0b284e960986c9166409d4eb04aa360183357cb16
-
SSDEEP
3072:2y4XTDT6PHEHstjwMCr2H4NFpnDuvArMDaxlPa2H4NFpnDuvArMDaxlPF0:R4XTDWPkwCrG6FxDbTxkG6FxDbTxb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cd4ff0f6ddf573af986c3f793f70d87_JaffaCakes118
Files
-
2cd4ff0f6ddf573af986c3f793f70d87_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ