Static task
static1
Behavioral task
behavioral1
Sample
2d8eaf35be420c2e5481796106cc97ae_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d8eaf35be420c2e5481796106cc97ae_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2d8eaf35be420c2e5481796106cc97ae_JaffaCakes118
-
Size
31KB
-
MD5
2d8eaf35be420c2e5481796106cc97ae
-
SHA1
4f2b4fd7fab0d8ba122b5bc3e1c5f28c21a2a9b9
-
SHA256
30d421075f2d9909e912f88a5692800d226ce1001c5d6b0c8fa750c16424ffa3
-
SHA512
f6676954f7b7142f254a00afef2bc537a1462c98a96229ad345bf9ed01545afa2a7532871233e3438cfa6e6e9db93afe94ef970d4bde73a60aed7e9ab344297e
-
SSDEEP
768:1OsGaP6XgVMQOnO89VtO+8aRXlUaY6aRanbcuyD7UJuT:E4PVVM/nLITuydwnouy8sT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d8eaf35be420c2e5481796106cc97ae_JaffaCakes118
Files
-
2d8eaf35be420c2e5481796106cc97ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE