Static task
static1
Behavioral task
behavioral1
Sample
2b72f760e5f2d1a113ba5eea94ecd735_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2b72f760e5f2d1a113ba5eea94ecd735_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b72f760e5f2d1a113ba5eea94ecd735_JaffaCakes118
-
Size
342KB
-
MD5
2b72f760e5f2d1a113ba5eea94ecd735
-
SHA1
d9811c1e30600a00ce8c36341e7b342395de32df
-
SHA256
6285f880bd6de2ed43b2e91998e50530364823fe4ffb0519c5d40f735012f906
-
SHA512
714204599e69ebfc9dfba44ef952af87b082afd930f5eec93f60ceb0a61fbbcfc6e432e03a8652d7c8d7fab03c707a0188f45072e5b774f24277f960d09e529d
-
SSDEEP
6144:tqC8+WFVvLfaske2OAzp9M3u81DYG3F2mWGdURf8X2n4z9VP3ssB:0CnWVDStHOeK3u81DBFDUOXR9VP3D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b72f760e5f2d1a113ba5eea94ecd735_JaffaCakes118
Files
-
2b72f760e5f2d1a113ba5eea94ecd735_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 315KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 720B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ