Static task
static1
Behavioral task
behavioral1
Sample
2f0f5004a7dcd89205ae09ff23a72920_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2f0f5004a7dcd89205ae09ff23a72920_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2f0f5004a7dcd89205ae09ff23a72920_JaffaCakes118
-
Size
3.4MB
-
MD5
2f0f5004a7dcd89205ae09ff23a72920
-
SHA1
7c5af4f9a38b6b16bed1c27302297c90ad4194fb
-
SHA256
12efb737c24719e7ebd04df11baf1a188ae94ee91e26c4723921d3967801d6b0
-
SHA512
62f250cb7bf1b10147f74eafeba20d29520e9dc08d30d5c641e414d65c3293d995c941fa7e488e3b08770fa1f60aa6a7136e18ac2015cb6b6da7a6d15f6d314f
-
SSDEEP
98304:DzGPIHbsZiJk0iO99tQAlJEY8SvkycPFJVWIH3fA:PL7sZiFNQAD89yAFTNXI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f0f5004a7dcd89205ae09ff23a72920_JaffaCakes118
Files
-
2f0f5004a7dcd89205ae09ff23a72920_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ