Static task
static1
Behavioral task
behavioral1
Sample
2cf1a2f2e4994d5d62f9511ae43b3650_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2cf1a2f2e4994d5d62f9511ae43b3650_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2cf1a2f2e4994d5d62f9511ae43b3650_JaffaCakes118
-
Size
124KB
-
MD5
2cf1a2f2e4994d5d62f9511ae43b3650
-
SHA1
1f87c185476ebbf8bd622645511037ef4c654489
-
SHA256
557d5e3320ed1f903157630be554af1e02a87807bd0e674451d9d6aa8f45b082
-
SHA512
f4246d8dc65e7342f1af09e4dfa00c3f182457a90da2434c5d5513bbe6f040e5d59a4a4817e4f2a5041b6c9aa9fd375a8e5e46111602201dbc00d43cd87b1575
-
SSDEEP
3072:OFW0VqSmI2jUKmOtmout8P9RgpCAWNftl:z0+I4U3kmoSwsC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cf1a2f2e4994d5d62f9511ae43b3650_JaffaCakes118
Files
-
2cf1a2f2e4994d5d62f9511ae43b3650_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.... Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.... Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE