Static task
static1
Behavioral task
behavioral1
Sample
2d2a988f398b362b694959c2b17f2fde_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d2a988f398b362b694959c2b17f2fde_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d2a988f398b362b694959c2b17f2fde_JaffaCakes118
-
Size
83KB
-
MD5
2d2a988f398b362b694959c2b17f2fde
-
SHA1
7bfecd24c9ef11734d9ffe3a5d782724dec0dddc
-
SHA256
46372b696b4203d5468a544ccbe481117066bd99ef16ce80b72e66d50d127535
-
SHA512
e9c5d7230f770933af7be2b992042e6d040b79bab05c4079e6ee3c5a85fa12dc34336f15a28efd1d78c02274e868b15aa7e19431888b691e1192d9859d462198
-
SSDEEP
1536:7PhpbB2lR5K0fFSREl/4Jm4oF6B7zfQiNXZJz4ppBGsbQ0qwtopIJAWk/WT:3B2lRk0fFSRIEFoFa4AJJyGYhqwupImW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d2a988f398b362b694959c2b17f2fde_JaffaCakes118
Files
-
2d2a988f398b362b694959c2b17f2fde_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ksgl40 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ksgl41 Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ksgl42 Size: 609B - Virtual size: 732B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE