Static task
static1
Behavioral task
behavioral1
Sample
2bb069720b98bc965da7ec2c0c562d73_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2bb069720b98bc965da7ec2c0c562d73_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2bb069720b98bc965da7ec2c0c562d73_JaffaCakes118
-
Size
431KB
-
MD5
2bb069720b98bc965da7ec2c0c562d73
-
SHA1
f8bfa7997fe75b521a5c6cefdb50415018ef5fd0
-
SHA256
4f372c93bd85cd6784dc7328f2293daece5d8ed27c724ac0e1116449fdb2af4a
-
SHA512
2eeb789f3eddd064bc4c70dd120739c93b65354abec5774ef8ca48f9da103d0ad3eb3339ccebb88d5e65947ef44821257d19f6c9477d822235e8773265189a7f
-
SSDEEP
6144:f9peGLTJUmTKdBFKOTpnMHvG/84/vsyQs5AWTnFnriIMfIgQkc9QcLepvk:FwyTJUmdOVwsvHQs1rFnrLsIMc9QcLeW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bb069720b98bc965da7ec2c0c562d73_JaffaCakes118
Files
-
2bb069720b98bc965da7ec2c0c562d73_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 277KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ