Static task
static1
Behavioral task
behavioral1
Sample
2d3265a1e29169eae6b03d23a7036e2d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d3265a1e29169eae6b03d23a7036e2d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d3265a1e29169eae6b03d23a7036e2d_JaffaCakes118
-
Size
109KB
-
MD5
2d3265a1e29169eae6b03d23a7036e2d
-
SHA1
ac8d6748267315bbea55a17e75dccc346177403c
-
SHA256
b2a7363688f9296b88454eacd96228bdf1a117c9788c863570923b8427feda96
-
SHA512
559b17a4a2e1a3701561d2cadbfb1363d9494972ad46f7d6bb8f728f5615ad3898a4766240e1af80993048db47a6e6fb170dfe9a019b5b5aec4d136100477871
-
SSDEEP
3072:a0ZNPW+yLPQmB3jmFqR9CfPezU1k80pk3bS:FOIcjmFiAezUK3pEbS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d3265a1e29169eae6b03d23a7036e2d_JaffaCakes118
Files
-
2d3265a1e29169eae6b03d23a7036e2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 78KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lak Size: 6KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE