Static task
static1
Behavioral task
behavioral1
Sample
2da7287ace033678c65fc7e0c25ef12e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2da7287ace033678c65fc7e0c25ef12e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2da7287ace033678c65fc7e0c25ef12e_JaffaCakes118
-
Size
144KB
-
MD5
2da7287ace033678c65fc7e0c25ef12e
-
SHA1
d550cce72af33214876e31554f005f0551f462ae
-
SHA256
fe16d51a6067323d57b3ce00cecccb7f831a1cf7ef657573fd856b5f49530d97
-
SHA512
0c7da87a02d2916589f4200ce711f72b6e7e91528f331df370262749f2076079cd7d316cfb69ad25133c60c0467a21e8760720592d38c21f1e7369f212585d6f
-
SSDEEP
3072:3UaBHaklTbkZQl9XH+JArMGvTuVfy6OlFBHRcGgTd3dN+6QCSR53XKV0ovUCK:5B6kHfOJAwGvaVf6R0dNZSR53Xzovi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2da7287ace033678c65fc7e0c25ef12e_JaffaCakes118
Files
-
2da7287ace033678c65fc7e0c25ef12e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: 512B - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 142KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE