Static task
static1
Behavioral task
behavioral1
Sample
2588b6d41a51a847cc7f370ec8e266ef_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2588b6d41a51a847cc7f370ec8e266ef_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2588b6d41a51a847cc7f370ec8e266ef_JaffaCakes118
-
Size
5KB
-
MD5
2588b6d41a51a847cc7f370ec8e266ef
-
SHA1
716129acfa9303042b76e6d18a9101ddcf5420c3
-
SHA256
f74a0a33a10f7edfe4892ca6c5da4f319282c1cf7500933ef243ba2231adf686
-
SHA512
351026b867a806a96a8e1526c19d3c8aba103db068175a13ac12ed91258a20390a9277d2637eb59d8f2379245498e9da4b53ea965e53fc45f176af6a3044dfce
-
SSDEEP
48:OEPR66NA2iBJh4PEExbWfWTCEKUgBp/q1VPvLBsXU3KmokxYSeVY8JHSkRITfXDI:nPR6IDGJmxVTxKUu/iNjBee81aPDo6o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2588b6d41a51a847cc7f370ec8e266ef_JaffaCakes118
Files
-
2588b6d41a51a847cc7f370ec8e266ef_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE