Static task
static1
Behavioral task
behavioral1
Sample
2d41695089b0e1022a6c983e0357c146_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d41695089b0e1022a6c983e0357c146_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d41695089b0e1022a6c983e0357c146_JaffaCakes118
-
Size
128KB
-
MD5
2d41695089b0e1022a6c983e0357c146
-
SHA1
2ea895ae6f6ab6078120292a5d2e2e2397366685
-
SHA256
2f41699fdaf40fbceeaa158b29b566d162b4be300858f94400515a93dafc3c2b
-
SHA512
3dad4a579a5bd8aa8a7efc1a03c6ae7d64bab6f70d199915ed29c1e5d3aa65adb980570d31da7309d8789806ff81d194e2057e183556651e8b095a35bbb47adc
-
SSDEEP
3072:bVkTROR4N93ODcuUB3gM9CywD6GJMuOgp:rR4TOhW359CDvJMn2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d41695089b0e1022a6c983e0357c146_JaffaCakes118
Files
-
2d41695089b0e1022a6c983e0357c146_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
vdwv Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jvwzr Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
w Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE