Static task
static1
Behavioral task
behavioral1
Sample
2d7d4f17b0bece02d0ca29241334143b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d7d4f17b0bece02d0ca29241334143b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d7d4f17b0bece02d0ca29241334143b_JaffaCakes118
-
Size
135KB
-
MD5
2d7d4f17b0bece02d0ca29241334143b
-
SHA1
5a1421ce1813fd07bf25773c747c8027d322b3e5
-
SHA256
961ef320fca5d7f325f2aa13582c43c3fbe15a0f2552909b0a2f5b7301146cc0
-
SHA512
d3cdb720c9e1831a6154560a6f16ee8047287f30afb424db5822ff5d7db083315dd6ac53ded237dc97f928418a1163b5ac131d982ec8ea9ce038deb6f223f2d0
-
SSDEEP
3072:QzOj0k9H1MipRU6Emkp9iJQCtPCISHaHe8tryzNxKxrVDfv5DvPDftv0gMqRqV4A:QkHW8RUVxp9iJQcnSHaHztryNxohbvVk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d7d4f17b0bece02d0ca29241334143b_JaffaCakes118
Files
-
2d7d4f17b0bece02d0ca29241334143b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 160KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 212KB - Virtual size: 1003KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ