Static task
static1
Behavioral task
behavioral1
Sample
2496d5e9f992e76f3235872135dbee88_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2496d5e9f992e76f3235872135dbee88_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2496d5e9f992e76f3235872135dbee88_JaffaCakes118
-
Size
620KB
-
MD5
2496d5e9f992e76f3235872135dbee88
-
SHA1
4ac395892a9715494590e3dedd60d53d85f74046
-
SHA256
32c9bcc2718ca1bd891faab241eea8600928775e8bbff189533e7ef4ba2a6e25
-
SHA512
832d58d860019009c82e1f45d3cdea71682ef6275379d334b564f1cc72d9c46a903831a5032f9a32ec0bba868405101073406b81525bbce8b1d87f6563fdced4
-
SSDEEP
12288:kta4wfpKlEEOnKK3mTgbylSUATH8t8KlKh47q0EMvsMIBdEMqaJ:kc0lEEOnwcZ1TH8++rpU/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2496d5e9f992e76f3235872135dbee88_JaffaCakes118
Files
-
2496d5e9f992e76f3235872135dbee88_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 550KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE