Static task
static1
Behavioral task
behavioral1
Sample
2b7e39d7a3729f2044bed35c973d457d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b7e39d7a3729f2044bed35c973d457d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2b7e39d7a3729f2044bed35c973d457d_JaffaCakes118
-
Size
64KB
-
MD5
2b7e39d7a3729f2044bed35c973d457d
-
SHA1
3d455f51baba9f32620beb604d028dbfb0d41a23
-
SHA256
ce1a6e95fd91bf3d06e8ec95854eb426bc4c9fb9dcabcc0f91548b5ff2335016
-
SHA512
738d4ab98fd6a61a8db6f9995f0540c9a45668f9fcf25f24849c3a8871e59af5a25ecef8c673f7e033e15f795c3f36f7469ce9ef9d39f42afe19cb7d8e5bb1b3
-
SSDEEP
1536:sGIyXGZoDlMdTjjlkbLDnVKb/wHLujjXkH:xIPoGBjObPnVKzwHLMjXkH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b7e39d7a3729f2044bed35c973d457d_JaffaCakes118
Files
-
2b7e39d7a3729f2044bed35c973d457d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 63KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE