Static task
static1
Behavioral task
behavioral1
Sample
2a140d35ff080794134faa332a3f252b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a140d35ff080794134faa332a3f252b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a140d35ff080794134faa332a3f252b_JaffaCakes118
-
Size
61KB
-
MD5
2a140d35ff080794134faa332a3f252b
-
SHA1
e8dc89d4742721ddceb962d38d66d1424f2432f2
-
SHA256
5c87ccd115dd4923071b6824189db6bee1affae2676a73ce5383c5ceae9fb3ec
-
SHA512
72e07546a2d882ba49f595d6a1695fc3063868bc838af36f84107c6471d3ee7282fccae693eaf85bfd58038ad5bae720bc297e1f1415fd7626f30262f4da55a6
-
SSDEEP
768:QUlvMJ0eWZfNyXRhhPTfVUjN0EiDYv0+fwE7JX0E17JIIyq8z5nrp5EBSUEurODj:QRJ0eWZchh7fVUjrlIV/vEBSUEur96j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a140d35ff080794134faa332a3f252b_JaffaCakes118
Files
-
2a140d35ff080794134faa332a3f252b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ