Static task
static1
Behavioral task
behavioral1
Sample
2b6e8f13a30c12a040eb6653b9568272_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b6e8f13a30c12a040eb6653b9568272_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b6e8f13a30c12a040eb6653b9568272_JaffaCakes118
-
Size
48KB
-
MD5
2b6e8f13a30c12a040eb6653b9568272
-
SHA1
f23ba8ad74425bb3935b29b89c76f2df72b52649
-
SHA256
a4f70556349298e99202b1d2251a1b963e0aa4c41d0896951cbbef2f8708f3d5
-
SHA512
76d1aeed854a2640fab60a066acc1467f30afb2d5a50ec9d4fb6f5f928a29fc0a10d2b44d280f380f5ef84da44227aa4e3ea896ddab1a41ffc73d75e450ce250
-
SSDEEP
768:QVuu5q2mzSy5Oz8Gz13C8wGFdESe7d5ZUYNqI8//QqE:QImpmzSy5Oz8wPds5qRI8QqE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b6e8f13a30c12a040eb6653b9568272_JaffaCakes118
Files
-
2b6e8f13a30c12a040eb6653b9568272_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc.. Size: 168KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE