Static task
static1
Behavioral task
behavioral1
Sample
2a09081e95ca62caa48847c4eba1f51c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2a09081e95ca62caa48847c4eba1f51c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a09081e95ca62caa48847c4eba1f51c_JaffaCakes118
-
Size
291KB
-
MD5
2a09081e95ca62caa48847c4eba1f51c
-
SHA1
88d9f11fc2b0e9172f98c41e561d321650882db9
-
SHA256
7f11fd88d359cc58a4e249184c454d3b0c91352214f8f73cf7bdd73cabbb62dd
-
SHA512
858670bec157d1e9fbb0bf4940cfb3e9d92c9d721cd9b0b645fba1f74c24e352ad3e08ee09be00473d81b222960b54ee6ee2eb1d586756b62faac7dc65daa6b2
-
SSDEEP
6144:0a9l1d49BAtSgNQMw8hqXiVECwRtqnguv6JLcPyU0bT6zxZ+lrB:79lfw/gix8hQiVEVuv6JLk70byS7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a09081e95ca62caa48847c4eba1f51c_JaffaCakes118
Files
-
2a09081e95ca62caa48847c4eba1f51c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
u9�l0 Size: - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
u9�l1 Size: 288KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����88.. Size: 528B - Virtual size: 528B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE