Static task
static1
Behavioral task
behavioral1
Sample
2db4ae0daf696f0bcd91ab4cf957b2b7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2db4ae0daf696f0bcd91ab4cf957b2b7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2db4ae0daf696f0bcd91ab4cf957b2b7_JaffaCakes118
-
Size
2.1MB
-
MD5
2db4ae0daf696f0bcd91ab4cf957b2b7
-
SHA1
b445ca99c2816a4bb7292218b135099505dcba4c
-
SHA256
9c873744a5f4f355cd8953c92f61c3895218e53fbcb8045391925ec8be54b94b
-
SHA512
7fc6e05cd06ba29ff4743c7135a202bba9baef96ca45edfa2c40f1ac0783f668c2fa35197dc079be7d1448eb1cce3241dbe38e12e5cb91110f2f54f16fa2e8d3
-
SSDEEP
49152:UXW0kL123Awgh4k6i2mTZ9Wlxd8z8cZ09kuwOtSPob5LNFL9wra6AguqM8ed:U2LGgL632ZCxd8zJ05tS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2db4ae0daf696f0bcd91ab4cf957b2b7_JaffaCakes118
Files
-
2db4ae0daf696f0bcd91ab4cf957b2b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.0MB
IMAGE_SCN_MEM_READ
VPR_DEMO Size: 580KB - Virtual size: 580KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPR_DEMO Size: 1.5MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPR_DEMO Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VPR_DEMO Size: 28KB - Virtual size: 28KB
IMAGE_SCN_MEM_READ