Static task
static1
Behavioral task
behavioral1
Sample
2b7e9f30a4ec8bc5b18a80a62d5991a2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b7e9f30a4ec8bc5b18a80a62d5991a2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2b7e9f30a4ec8bc5b18a80a62d5991a2_JaffaCakes118
-
Size
37KB
-
MD5
2b7e9f30a4ec8bc5b18a80a62d5991a2
-
SHA1
3d5f328cffc366d85ffabeb4f3088db276acab71
-
SHA256
72203d230ca161479fcb7b8245b16f27123724404a4ee1ee7d848339c4a11f71
-
SHA512
33cb883158a8cf248de5d9e565572e4cfed0232473b184de1bfd5046b1e591377fbf18595f5ce6da975e399f93c5b5d9d7571c6c677454d2e027bbccd4572e5a
-
SSDEEP
768:7wW0Km1Hk4+NtoqKALHlfMPu0/i5HJTRD6H4QiqtQ1fI:sOm1Hk5jK0FkPu0K5iZiBS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b7e9f30a4ec8bc5b18a80a62d5991a2_JaffaCakes118
Files
-
2b7e9f30a4ec8bc5b18a80a62d5991a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 890B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE