Static task
static1
Behavioral task
behavioral1
Sample
2503d29af2fc993a4ed1ad1810b2e605_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2503d29af2fc993a4ed1ad1810b2e605_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2503d29af2fc993a4ed1ad1810b2e605_JaffaCakes118
-
Size
35KB
-
MD5
2503d29af2fc993a4ed1ad1810b2e605
-
SHA1
075d817c6485e2e0ce5296bc543155bf3a582827
-
SHA256
c17baac3b4a6ac1ed6d09b0f79ce07b26a893af1272c55abc45a0b7071d7d7bc
-
SHA512
6dfe25af2ed53d87880237f4b00b311d46d3d84770ce2336e29e4963af237a24a4f9de6c424d78704d82f1f6f48d8ba8c50aa1c2f4a03cb42e18f3af8fc4d293
-
SSDEEP
768:tk3VhvjptS2fBpudiGibD/uN5xNezbIVUNtOheU8wQbXPQXqN9oTAgiAVqtd:tkFhv1Jf7ukbDGN3NlUNtOgU8wQtNeT4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2503d29af2fc993a4ed1ad1810b2e605_JaffaCakes118
Files
-
2503d29af2fc993a4ed1ad1810b2e605_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE