Static task
static1
Behavioral task
behavioral1
Sample
2ec0628abda7a1cbc152c72852dcfc9c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2ec0628abda7a1cbc152c72852dcfc9c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2ec0628abda7a1cbc152c72852dcfc9c_JaffaCakes118
-
Size
104KB
-
MD5
2ec0628abda7a1cbc152c72852dcfc9c
-
SHA1
4806f571d863140ea7adcade8765285ee32e7dfb
-
SHA256
d221b337f69618a6403a7d7f49868562b5b226f538ac2b5515ba9d9552c2c493
-
SHA512
204dbce02955dfdf6e0417e461ad1cca589c0c29b586d3c4d204515d1cc4d4e133782910bb2d6b53061f0f63af13f6b937b65bf1a0b33ffd45f00b303e299189
-
SSDEEP
3072:9WruNlc3rskGcEBtDGGXGjhVcxq6saV6:9QYlc3AlMi1p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ec0628abda7a1cbc152c72852dcfc9c_JaffaCakes118
Files
-
2ec0628abda7a1cbc152c72852dcfc9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c2d3c56017ffc9f272aae4a4d190dcc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
Sections
.text Size: 67KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 26KB - Virtual size: 664KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taz Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE