Static task
static1
Behavioral task
behavioral1
Sample
2d177a8d7595dd3ec5896207f9e4f510_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d177a8d7595dd3ec5896207f9e4f510_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d177a8d7595dd3ec5896207f9e4f510_JaffaCakes118
-
Size
1.0MB
-
MD5
2d177a8d7595dd3ec5896207f9e4f510
-
SHA1
1a5878e4aa2e1dbcb5b2d4c15cffc7ba7f08fe65
-
SHA256
5737e368b2efd8ba31d838b64bfddb29a239d35cbc616a9cd2d50941ad2f57fd
-
SHA512
64a9eb5597c213bff1bc635ac523b12a0fcbfd51a693143775ab847fa7a1bd2e6a4fc21935f69d41317b7e485f71f70ecdb06aad19d37b3916f7542fb1b5ed22
-
SSDEEP
24576:Xckvu0wwuFQZfpcYRzCL8VlJuxHQ6YqJG1Ew2tjvd7YFA65:twwiOBzJmYqJG1Ew2tvd8Fn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d177a8d7595dd3ec5896207f9e4f510_JaffaCakes118
Files
-
2d177a8d7595dd3ec5896207f9e4f510_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.USER32 Size: 560KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE