Static task
static1
Behavioral task
behavioral1
Sample
2a7f98916fa33e8d1aedc9be7934e70d_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2a7f98916fa33e8d1aedc9be7934e70d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a7f98916fa33e8d1aedc9be7934e70d_JaffaCakes118
-
Size
1.3MB
-
MD5
2a7f98916fa33e8d1aedc9be7934e70d
-
SHA1
e781e819a8031e736936cfc22477caa95afbe361
-
SHA256
9a559f72875fc289720d3ffe01a8097181d273e298510e30c0dc26170c116db9
-
SHA512
c0f3eb809fd1730982c36b39b57dcae1b7a8fb8e05e5f63d5f1a01d7824e9a273bb35f7a509f597f646eaf01460268fe14de598d03653b958b24582c0673d6e6
-
SSDEEP
24576:/i59H0Ife5GA6falgg5mHeVU0Mz5dxz9SxfZ95n+l29nNc5ii6HuSY0w:I9HVOGAPjmT0Mz5dxpSxZ+l2zcz6OSdw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a7f98916fa33e8d1aedc9be7934e70d_JaffaCakes118
Files
-
2a7f98916fa33e8d1aedc9be7934e70d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1008KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 155KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 54KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE