Static task
static1
Behavioral task
behavioral1
Sample
2e88e1d1b0b136f9d9f1fd560cdab5e9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e88e1d1b0b136f9d9f1fd560cdab5e9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e88e1d1b0b136f9d9f1fd560cdab5e9_JaffaCakes118
-
Size
700KB
-
MD5
2e88e1d1b0b136f9d9f1fd560cdab5e9
-
SHA1
e37c42fe46359eb33c4d57129a91f35346fc4a91
-
SHA256
ff614e1894ca0b4e1c3b00f340325c624f9958135745054c072b108cdac0cb50
-
SHA512
6a20ad156856b026ebd604657f7e0df6d66a92471fcf8451947a5a911bb35f86e961f314422bfd9bccbc48302a971b2b693a21e7d5a84d3b33594315e28cdd63
-
SSDEEP
12288:PZA2+xnmy+oHYuOGZlKEiVj3kBe1agoJtuk0e0j/V:Pu2+1my5HYuOGZkJ3/EtuheU/V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e88e1d1b0b136f9d9f1fd560cdab5e9_JaffaCakes118
Files
-
2e88e1d1b0b136f9d9f1fd560cdab5e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 68KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
35640232 Size: 626KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE