Static task
static1
Behavioral task
behavioral1
Sample
2db4c1f1a7869850e9e2f1d72a981294_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2db4c1f1a7869850e9e2f1d72a981294_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2db4c1f1a7869850e9e2f1d72a981294_JaffaCakes118
-
Size
25KB
-
MD5
2db4c1f1a7869850e9e2f1d72a981294
-
SHA1
05839cc28b8f121156c401699b53afe209fc0f46
-
SHA256
08c47b746ef4e9035e36406c39b06f81be2d9d8464f9a4901bd3874983e61e01
-
SHA512
27e3b89dba8c27294687be1e8b9d3f131be5035817e7846d16d90427568855acb843c2c66ddb2c6191925c55d5d270f845cfccbecbe8dab77c99c78f8e1ab10c
-
SSDEEP
384:IV8Ro+o9flJV8VDO6bhWDdmcSUsnsk9GFvEjpDiCl1AadeOlwP/q7MOBAUi:9fQdJVCDZbhSmlL0GHA6eOlwP/POBW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2db4c1f1a7869850e9e2f1d72a981294_JaffaCakes118
Files
-
2db4c1f1a7869850e9e2f1d72a981294_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE