Static task
static1
Behavioral task
behavioral1
Sample
2d0d712985128fe35199c927a49d6119_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d0d712985128fe35199c927a49d6119_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d0d712985128fe35199c927a49d6119_JaffaCakes118
-
Size
16KB
-
MD5
2d0d712985128fe35199c927a49d6119
-
SHA1
2bdf9911369c6e7bc329b20f63fbbac0485b20a3
-
SHA256
fe767f557928514f0469dbc94043e28790fd36956f1c21f1322cec784948a6a8
-
SHA512
1606b46b1aff2768c2c408d5ca3356666df4fb8379234e9d047ea677884c181e8f0f9620c1927a4046d2f9cd4e6c4f8ef214970e01e5b1b4025a55a406c44641
-
SSDEEP
384:NWtMWKVbZb7ODe4g2vDdJh9IRibgzFiRcR0UbYpZNyj:sgFIDtg2pqRibg5iRPMj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d0d712985128fe35199c927a49d6119_JaffaCakes118
Files
-
2d0d712985128fe35199c927a49d6119_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
/ �{0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/ �{1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/ �{2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE