Static task
static1
Behavioral task
behavioral1
Sample
2e089e736b97e1ca15e4e54ab084b9b5_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2e089e736b97e1ca15e4e54ab084b9b5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2e089e736b97e1ca15e4e54ab084b9b5_JaffaCakes118
-
Size
77KB
-
MD5
2e089e736b97e1ca15e4e54ab084b9b5
-
SHA1
6b56dd3136229d6355b8b21cc35a459cd4f098c4
-
SHA256
edd9f1fcabd6720b4057c39494cb6a43251ee170f9ed4ef20e84cb135ac7c062
-
SHA512
d42e65a59db4f23c19b51ab59aff2a63a3e0b961638ee5b6ec6b82752a64931c0822c80ed1cc9972dd60412b1b0cee7b0e78233d8c66d87f1a1762ca280b1dc1
-
SSDEEP
1536:pZDSBIdIH3sgxHKbYD/NosvVF0YBdEfgB4dZR6MUT+CzyOi:pZuCuXs5C/NFSqifgPrzy7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e089e736b97e1ca15e4e54ab084b9b5_JaffaCakes118
Files
-
2e089e736b97e1ca15e4e54ab084b9b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 26B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 734B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ