Static task
static1
Behavioral task
behavioral1
Sample
2be1a8b6ea04bca523bd34c486885e0b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2be1a8b6ea04bca523bd34c486885e0b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2be1a8b6ea04bca523bd34c486885e0b_JaffaCakes118
-
Size
1.6MB
-
MD5
2be1a8b6ea04bca523bd34c486885e0b
-
SHA1
65a03f86cfd756ae622302cf7a8e0668b8686810
-
SHA256
1af9d7fe63c89eaa7ec655b62feb9ec351841cd35a1a27739383f2f6a7590e28
-
SHA512
9b0f4015a6fd1193768462be9545acac521ea2fa9f10a35b9cc9da503c4229e6c87dff08ca018cd010b207b7dac527cc4557faa9ba4042a4c9a11a24fdea8008
-
SSDEEP
24576:1VarDYvaYEfcb00ihGAmm/qaEkNVQcuToL2jn3IP3bbV/2ttfKb+Fv33VMS7bXR4:1JaYy8GXzFEKVQcbLe3m33V4KbK337zO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2be1a8b6ea04bca523bd34c486885e0b_JaffaCakes118
Files
-
2be1a8b6ea04bca523bd34c486885e0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 276KB - Virtual size: 772KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.2MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uiycmvyg Size: 932KB - Virtual size: 932KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oajqoswc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE