Static task
static1
Behavioral task
behavioral1
Sample
2fb8297aa195d6604b3e414257e79e5b_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2fb8297aa195d6604b3e414257e79e5b_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
2fb8297aa195d6604b3e414257e79e5b_JaffaCakes118
-
Size
848KB
-
MD5
2fb8297aa195d6604b3e414257e79e5b
-
SHA1
f28374ed5c59a5a9797c25432adf9e65278fe319
-
SHA256
d707ed6ef44d28d9c95c2a0385b2f492eb2df56796de7336ed59cb7163cd6ab0
-
SHA512
11506ed914798988027bf3c7916dc643edfa589a6a76d7117949aa2d55193ea5b835dab4ce218857a9bada410cdb23090e27662b697b86b662602e61356d63fc
-
SSDEEP
6144:UZfec9EbXDk6Rk8KF3rG1VVE+IRuHO13rG1VVE+IRuHO13rG1VVE+IV/UOPSe572:UZWtI6Rk7bu9O1bu9O1butOB0H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fb8297aa195d6604b3e414257e79e5b_JaffaCakes118
Files
-
2fb8297aa195d6604b3e414257e79e5b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ