Static task
static1
Behavioral task
behavioral1
Sample
2be1e424640a2c21f37c61397a1127b9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2be1e424640a2c21f37c61397a1127b9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2be1e424640a2c21f37c61397a1127b9_JaffaCakes118
-
Size
389KB
-
MD5
2be1e424640a2c21f37c61397a1127b9
-
SHA1
cdf3bfde0bc609240a2afa07fc91bc661c0da779
-
SHA256
3350a9f5c07332c45f1a2e3172e7aa1543d958a53998fb1340309ac583648992
-
SHA512
644091898eb62ee681c5afa843edc2c479daa74431187dc9b311a8abd4416a0578946b536d8211eebe727d3958818d087416cd4d0e6e19b0d9523720a7403501
-
SSDEEP
12288:GLlueN4Omb29UJ9EZrG3TbYaWbPhl0Z7fQ0Xi:GLlueN4O1UzMaWbPD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2be1e424640a2c21f37c61397a1127b9_JaffaCakes118
Files
-
2be1e424640a2c21f37c61397a1127b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ffcq0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ffcq1 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ffcq2 Size: 955B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE