Static task
static1
Behavioral task
behavioral1
Sample
2d8d56aceb1334a4f48ef3e202186c6d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2d8d56aceb1334a4f48ef3e202186c6d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d8d56aceb1334a4f48ef3e202186c6d_JaffaCakes118
-
Size
143KB
-
MD5
2d8d56aceb1334a4f48ef3e202186c6d
-
SHA1
046efbc0a462a7d94072924b18bc53c2172adf8a
-
SHA256
373909b1128ca59ccbd39fc0dfac46a967ad5cd111103241dca77da754ef8f8d
-
SHA512
ce56850e07c1d19992f9ad6700c127039a80759c5c6c7f48aa8618efc1aad190cbabb65e99795ddaf95767451747f7e2f4c905069ddc14e8406c6d1c44ba420e
-
SSDEEP
3072:OrbY9zxWnqFqqsxu8DN+FlzJqCnQs4VF5276xvB5LqTuZ4:OrbYuqFqhtN+HgSt4V/2SB5Cu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d8d56aceb1334a4f48ef3e202186c6d_JaffaCakes118
Files
-
2d8d56aceb1334a4f48ef3e202186c6d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 142KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE