Static task
static1
Behavioral task
behavioral1
Sample
2e04fc11cb349e08bb3fdae105aec8e8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e04fc11cb349e08bb3fdae105aec8e8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2e04fc11cb349e08bb3fdae105aec8e8_JaffaCakes118
-
Size
277KB
-
MD5
2e04fc11cb349e08bb3fdae105aec8e8
-
SHA1
1e13f8f8c85c7f52e3eb8bb913adf51b82c3694a
-
SHA256
ef6c9b05c1e2aa17afe6c9c80ff789dd3bde166279c23525cddd9cb41b1b1f85
-
SHA512
2bd351c08ebd3c65dce3bc7910858be344fbe635d1f6d5269d25605784766e5df3abab05ba945bb278d4847f57b22f5df072a358b46cb9481ec1b1ca56b0d0ae
-
SSDEEP
6144:/swxu02ZCFoIK2OgQQpY0CyXMyxOA6KQKgPhwy25nTonkl/B:/hxL2CKR0CaMMQxwy25nckv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e04fc11cb349e08bb3fdae105aec8e8_JaffaCakes118
Files
-
2e04fc11cb349e08bb3fdae105aec8e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ