Static task
static1
Behavioral task
behavioral1
Sample
2cff3f80725ed4334c3c1eeda203eb01_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2cff3f80725ed4334c3c1eeda203eb01_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2cff3f80725ed4334c3c1eeda203eb01_JaffaCakes118
-
Size
50KB
-
MD5
2cff3f80725ed4334c3c1eeda203eb01
-
SHA1
a7ea198ff907d99c79a50cd2a4a9231ae59e7956
-
SHA256
e16d926d08b6223f2b357a56578e504178ecd3d78fa837d47ed445707fbdcb7a
-
SHA512
8de7699ff8f8120c7c44448e4e9e02d961daa014142365a484fafd7b6f1d8d35f5bedf3bd101c04cadd0827b3ed7f500fe2c0788ac954e6e9b5810187365b44d
-
SSDEEP
1536:1Ie98O8iPa4aGbYrNXz1EPMI3kXQHJ2E3Q:1l8O8iCtGUzuj0XZO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cff3f80725ed4334c3c1eeda203eb01_JaffaCakes118
Files
-
2cff3f80725ed4334c3c1eeda203eb01_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
.text Size: 49KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE