Static task
static1
Behavioral task
behavioral1
Sample
2595c102fdc870ef34617fad42590bd2_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2595c102fdc870ef34617fad42590bd2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2595c102fdc870ef34617fad42590bd2_JaffaCakes118
-
Size
2.2MB
-
MD5
2595c102fdc870ef34617fad42590bd2
-
SHA1
358df7f37e647632966ea57d507052fd569c097a
-
SHA256
a34275e0740bb9b4def2d87c89ce285d57dbe5aa7857c0e386b95e61816cc187
-
SHA512
05e1a0ba94d61f1d819a8cbe6e5b8e69fb32c177a69bfd643eb5899f1bd02b2e450275b849c9f0e501eafa3fb582fc10b61e2ffa823e42b63af1353b1fe5cf87
-
SSDEEP
24576:2TXrDQDiX1Tr/JnlGfNwDQ7/e+9Ann3XEIwO9SpXJo8tyzsoVjF+nLeE2w2v3aZ8:WXsiX1P9ytL7q3wyqwfVBgvMaZV00Er
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2595c102fdc870ef34617fad42590bd2_JaffaCakes118
Files
-
2595c102fdc870ef34617fad42590bd2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 188KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE