Static task
static1
Behavioral task
behavioral1
Sample
2401b51a4e9b7b0f5c2a0ebc06a82ad9_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2401b51a4e9b7b0f5c2a0ebc06a82ad9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2401b51a4e9b7b0f5c2a0ebc06a82ad9_JaffaCakes118
-
Size
433KB
-
MD5
2401b51a4e9b7b0f5c2a0ebc06a82ad9
-
SHA1
d0b25335411f3b91b886b62c1686c0456f1b8208
-
SHA256
b554a8cd8cc6f2fa0572554b3c2f84bdd181d639ae2eb9dd9fb99fcab6fba794
-
SHA512
707c5c0c6b0ae856af0109adedb748805dc260a12042967a6fc2627a97471de60407b9b8730bddf7c4235d4a0fcc9efbc5feb0861a5ddf19136de64d2734df38
-
SSDEEP
12288:79s5d1lOi07PXQqydrZpUlePgsxUZxwTrobpps:7mNci0TgPgXxacI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2401b51a4e9b7b0f5c2a0ebc06a82ad9_JaffaCakes118
Files
-
2401b51a4e9b7b0f5c2a0ebc06a82ad9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.bpwbcc Size: 31KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tbnrle Size: 85B - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wdsvlb Size: 395KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ