Static task
static1
Behavioral task
behavioral1
Sample
2d7f24f4684a349772842c85fcda9f22_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2d7f24f4684a349772842c85fcda9f22_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2d7f24f4684a349772842c85fcda9f22_JaffaCakes118
-
Size
306KB
-
MD5
2d7f24f4684a349772842c85fcda9f22
-
SHA1
58ae4df127c7df12b9b6361bda103e25dfe12321
-
SHA256
c9633eb6243276934a3ba1962d13be4ebe794ae86de60f762c3cfe4c796ab279
-
SHA512
505b64238f290a9e64e8738772932a6ab7a0c7a6b975725f00502e9c1b4127fdae9d3faad044a038ccec3d699533147934bba23cffa8d49bb7455e8b0c2fe997
-
SSDEEP
6144:c6Et7gXQ052itWN9S0Q/rKv68TRG3pL/X64dyeUU/KUIef91Yl3jf5bwCBIbA0g:ZfXQ0QI5L+vRQ3JXXUMfIel1W3jf2yGM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d7f24f4684a349772842c85fcda9f22_JaffaCakes118
Files
-
2d7f24f4684a349772842c85fcda9f22_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.ASPack Size: 512B - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ASPack Size: 305KB - Virtual size: 322KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE