Static task
static1
Behavioral task
behavioral1
Sample
2c040a470a35a2b5d6c4d4256a04ba32_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2c040a470a35a2b5d6c4d4256a04ba32_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2c040a470a35a2b5d6c4d4256a04ba32_JaffaCakes118
-
Size
2.9MB
-
MD5
2c040a470a35a2b5d6c4d4256a04ba32
-
SHA1
f468a8446b7a9f0e135f81c681ef80779978284e
-
SHA256
919af0e923be96c8e5fc17f1629c71309257cbe3f1b5c0722d015df714f4d398
-
SHA512
24417fe69558062b36959ba7f9d6ac3ba287c4ec5fa5005a499a447497f10d42ad24ec11932f94af02401f0bff1a2cf3e93e06ff6e75b733aa6f368cae099920
-
SSDEEP
49152:s5pSqS/8Egp60ub/0bJM8gZ8vdyzkFkbUdDDRalPoj59GurJ1x:AS/8E0Ub/QJM8XwziKUdneuJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c040a470a35a2b5d6c4d4256a04ba32_JaffaCakes118
Files
-
2c040a470a35a2b5d6c4d4256a04ba32_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.textbss Size: - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2.8MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 166B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ