Static task
static1
Behavioral task
behavioral1
Sample
2e3126b7b84bdb00244ce9e4b82a9f62_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e3126b7b84bdb00244ce9e4b82a9f62_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2e3126b7b84bdb00244ce9e4b82a9f62_JaffaCakes118
-
Size
280KB
-
MD5
2e3126b7b84bdb00244ce9e4b82a9f62
-
SHA1
44dcaafa1cf5b204ed2b2440d832af4e82e55216
-
SHA256
e40cf9a2e1601023768f3796af2d50ca45da7815d0c9d5101c8fb8469e28c97f
-
SHA512
594c58282eb1e6db5467509ba739c27e94709c4e42bf8ca3144d2ff3cebd36411a4a679f452c24f8c6363f45cdecc485c6c3cc704eef06f6c754951428cfc955
-
SSDEEP
6144:Yw7e8pnr5C1N83RG4ZtRulNucZu3cYuMsQvWY3RlHgoX0:Yw7eyrksG4ZtRulk3Ufml3RlHN0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e3126b7b84bdb00244ce9e4b82a9f62_JaffaCakes118
Files
-
2e3126b7b84bdb00244ce9e4b82a9f62_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 942B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE