Static task
static1
Behavioral task
behavioral1
Sample
2fee2de5c63f5a0b14d89a023674fa3d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2fee2de5c63f5a0b14d89a023674fa3d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2fee2de5c63f5a0b14d89a023674fa3d_JaffaCakes118
-
Size
148KB
-
MD5
2fee2de5c63f5a0b14d89a023674fa3d
-
SHA1
7fff6ed1a02d6f96def1a9a3f25ba02425cbdce4
-
SHA256
70ebd459ea9435082d133f952b1398e6ee31b65a08c0853f7126b19cdf2c80b5
-
SHA512
bff0d2962df4e2d15bc8c406c7db571c84dc2a2e8c971875c09b4b44019012043d096ca12497de6c5631f073dd05f2ebd37740829743588c16ba8377ba7d1e1a
-
SSDEEP
3072:g5BuV7IR+H7p+bYqTO5+wm8FN+pfx2cTrGSOMPyP:g5CtH77qL8oNIMPI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fee2de5c63f5a0b14d89a023674fa3d_JaffaCakes118
Files
-
2fee2de5c63f5a0b14d89a023674fa3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
import Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data Size: 40KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE