Static task
static1
Behavioral task
behavioral1
Sample
2a6da7438aa31c48f3f25f73fb365d75_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a6da7438aa31c48f3f25f73fb365d75_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2a6da7438aa31c48f3f25f73fb365d75_JaffaCakes118
-
Size
77KB
-
MD5
2a6da7438aa31c48f3f25f73fb365d75
-
SHA1
d77c65e1d62002cbd907a208523e158cfe0c3204
-
SHA256
6878b7df2b16256e84edb53d8b77a29f74d426db8c7b66841951bab6c1ddbbdf
-
SHA512
b4c0f0d86199646f56d8c260f21e5690f8d2fc8ba71f63b0e9031de794d40b00c54f0856d8ad1d4776d55aab7e1fe95e9bbac9c93c439bcd316590c7f32d5832
-
SSDEEP
1536:aOd/jW5DYdE+uuZDlxPGsCX8kRWLdDTHWamsVJwIPSHwJ33L0B7kBegBaTp:a4/jW5DYdE+ugT2xRgd/yJqlV70Jk8i0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a6da7438aa31c48f3f25f73fb365d75_JaffaCakes118
Files
-
2a6da7438aa31c48f3f25f73fb365d75_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nlffev0r Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9cwnthsg Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE