Static task
static1
Behavioral task
behavioral1
Sample
2e6151b48978754baf46b4eb033e05fd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e6151b48978754baf46b4eb033e05fd_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2e6151b48978754baf46b4eb033e05fd_JaffaCakes118
-
Size
696KB
-
MD5
2e6151b48978754baf46b4eb033e05fd
-
SHA1
cfdc926c0ea9ff348efecc232d80066abc1a4e54
-
SHA256
6d463a38ab9d56649cb6347ed5eaf412052bb80fd0ed742a95f118af96371898
-
SHA512
23ea0530993249cbf47b647d19d6d440b9bb5f93d2ac4c393b02f669a308e2218e6c0725af7d14d4d6cba0a09ed28e786c448ed76c42e6233e1fd770eed15116
-
SSDEEP
12288:dsjTsqQpZF6Ay34Mo2cfZ2YLPBgF3Z4mxxBfnmdP0FtN+DD4/f3O6a:dsjIzpZ9g7uZpPBgQmXdcPkNIEHxa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e6151b48978754baf46b4eb033e05fd_JaffaCakes118
Files
-
2e6151b48978754baf46b4eb033e05fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 776KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 379KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE