Static task
static1
Behavioral task
behavioral1
Sample
2b2e152bdad676e9905346cee1193dd6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b2e152bdad676e9905346cee1193dd6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b2e152bdad676e9905346cee1193dd6_JaffaCakes118
-
Size
53KB
-
MD5
2b2e152bdad676e9905346cee1193dd6
-
SHA1
d123d51114ba23305273726c563115bd0537ec8b
-
SHA256
f3860c0b61a32446cdb9884ab4fc958d1a0481b8e893b7fc3fe1f38a1fab31ca
-
SHA512
1363e396beb51440ceb331b31dc48035aaa274a3e5bb178e276a860eda41a131c146e4dd597fcf743cec1f611ee4debe30840faaa304f00a2a9d4e1075447011
-
SSDEEP
768:EIM+1RvgwuZBPS9KK3mo117zpyWrGumCJ8YDHFvB3lPfqMU07B0JUtbADlGAEYmH:RMQOZ0MnoPxG6TNB3Bt7B0etbAwcQTd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b2e152bdad676e9905346cee1193dd6_JaffaCakes118
Files
-
2b2e152bdad676e9905346cee1193dd6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 356B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Fi7ke Size: - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Mybr Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE