Static task
static1
Behavioral task
behavioral1
Sample
2cef208d03ae2f434c85229428c66724_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2cef208d03ae2f434c85229428c66724_JaffaCakes118
-
Size
784KB
-
MD5
2cef208d03ae2f434c85229428c66724
-
SHA1
e3cb0614661cd3fe70bc4bd245678920e776c9f7
-
SHA256
29c3861feead5d99c7d2e4c1a50dd6b29f8ca4d8add002ca8028d2f876abbbeb
-
SHA512
bcc3bc8dc71434f8d9561ec8eba5dfedca332de67ef1bd6be0c55fc12abe316561f2212ee34b6fc354da94778281d4d971db8ab11d315aa72422a8286b5f0f85
-
SSDEEP
12288:vB0UM7PtYaerVBsrZBcpcWPk8ZQddwtxUMOnzHekqDE0F73vYaer:vB0U+MrVm1B4tZO+tHOzHcl7Or
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2cef208d03ae2f434c85229428c66724_JaffaCakes118
Files
-
2cef208d03ae2f434c85229428c66724_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 682KB - Virtual size: 682KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ