Static task
static1
Behavioral task
behavioral1
Sample
2c48919dc251d28d2cc1bb0dd5267c2f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
2c48919dc251d28d2cc1bb0dd5267c2f_JaffaCakes118
-
Size
5.0MB
-
MD5
2c48919dc251d28d2cc1bb0dd5267c2f
-
SHA1
c9f3112a5b4f67ee2627cf4032babf40a2488c68
-
SHA256
99dbf55f0d8a4c575e25e6db60c6473789b28da5cacfb7e78a42ecc7b661dcad
-
SHA512
df55262014f6fa1438e1ebf2d4e84782fd37227639322191e98c58afd6904998aab3080629c57c4df75399235d913484ff907d3b6274e32e49bb1544e90c3205
-
SSDEEP
98304:xJka+3sRgKrxrwco5jKGZmvflOikXFk60/4c+L:y4gKrNSbaOagL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c48919dc251d28d2cc1bb0dd5267c2f_JaffaCakes118
Files
-
2c48919dc251d28d2cc1bb0dd5267c2f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 138KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 4.9MB - Virtual size: 9.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE