Static task
static1
Behavioral task
behavioral1
Sample
2965fb1272d963a7865bb0a9540f3c52_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2965fb1272d963a7865bb0a9540f3c52_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
2965fb1272d963a7865bb0a9540f3c52_JaffaCakes118
-
Size
60KB
-
MD5
2965fb1272d963a7865bb0a9540f3c52
-
SHA1
1a251acb5a5de4dffc9949fda70c254ca6ec4d08
-
SHA256
fe78352610a656bf5c74b2ca46a10a6f6c35ed9041a786104cd4793d835a092a
-
SHA512
4e219853e382772b375f34e8954f7338323cf3ed227a1d952efc6a266868f976bb0c3adc8b129b36116e0903150817b224bd22ba4e213035fdcb20f6f1e27c26
-
SSDEEP
1536:U10J89YhCa1dYk+UUMTIiBeNtqEEF+UWW3I:U1o89Yh31d9+mTI+eNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2965fb1272d963a7865bb0a9540f3c52_JaffaCakes118
Files
-
2965fb1272d963a7865bb0a9540f3c52_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ