Static task
static1
Behavioral task
behavioral1
Sample
2a61583cd8b7c4ae682567091efa5b4f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a61583cd8b7c4ae682567091efa5b4f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a61583cd8b7c4ae682567091efa5b4f_JaffaCakes118
-
Size
1.5MB
-
MD5
2a61583cd8b7c4ae682567091efa5b4f
-
SHA1
4c2f566e4aafe16b245b42d8510f586bc1e7fab6
-
SHA256
f29e1cd0a846a41f6531b999af14989283edf0e5055cdbe599a25d98ccfb567b
-
SHA512
afc9735b9fe91e3b335ddfe9798fc74b9b12c31db8e5effe9a4b344d5e370f8fe3cd1a681c2dbb0dda2132c8de9a9ff5b450a7b43363998e99f1f9e0def2b572
-
SSDEEP
24576:RpcXp0KW2fTgCa7w64VBUrbE+8iqP2k+KlrZGltxdWyjg8/6C3RBsRnBtakxcSlU:RCLkCaUAnkPJ+KfuFXC4U5xyGF1q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a61583cd8b7c4ae682567091efa5b4f_JaffaCakes118
Files
-
2a61583cd8b7c4ae682567091efa5b4f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 15.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE