Static task
static1
Behavioral task
behavioral1
Sample
2cf59d82bbb824a25547cd54e783d2e2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2cf59d82bbb824a25547cd54e783d2e2_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2cf59d82bbb824a25547cd54e783d2e2_JaffaCakes118
-
Size
72KB
-
MD5
2cf59d82bbb824a25547cd54e783d2e2
-
SHA1
94641d94f4c46a6fb771718feab93df6a6db1338
-
SHA256
41e5dc6b678b3f0829bbef3c1a3a680e31ed4a93c4cae1c9379d145dcdff6b21
-
SHA512
741e1a2bada0cf4f7181ff27f0ec00cc886e2ccaf63537c4ec4d9f68efd2d619db056dac17aad4d67eac2fd41136f9c6da45136ebeb8714bb24eb9f7dfdd95c8
-
SSDEEP
768:E9+MNgnXmozqkjFY62v0Zu+ZQOXGJRCEOsnV0mYHR1IlpH6mXm/rCGA:i5iqs8NOvsVGbImt/rC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cf59d82bbb824a25547cd54e783d2e2_JaffaCakes118
Files
-
2cf59d82bbb824a25547cd54e783d2e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
pec1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE