Static task
static1
Behavioral task
behavioral1
Sample
2b594f5ed5315dd64daccd6d35c9076b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b594f5ed5315dd64daccd6d35c9076b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b594f5ed5315dd64daccd6d35c9076b_JaffaCakes118
-
Size
628KB
-
MD5
2b594f5ed5315dd64daccd6d35c9076b
-
SHA1
3c0ae96142d3c1ae80e9298fc4259d5167e2c96e
-
SHA256
ef9890312cca8c1851a31583d2247fa6312ab09f32e2b7f9cc241b7e11757a53
-
SHA512
7f32b48e10f693e65cdadef86bab8a79766b9b445e49be1f42613da912a5d9ded264e1bdadb7b25ba3795d266b7cc8ca445719a6d29d00164d58ef7319e954dd
-
SSDEEP
12288:UsAL/W5L/SZdSCvTF+bDTqXTa7vuJhU9D7NWPK2641089kpjUw+E3rKZ0N:UsW/WNSZ8CLGETfJm9XoPK26g0tJUwFF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b594f5ed5315dd64daccd6d35c9076b_JaffaCakes118
Files
-
2b594f5ed5315dd64daccd6d35c9076b_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.exc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE