Static task
static1
Behavioral task
behavioral1
Sample
2eb8c87f2cb49f3950009166d0b6b281_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2eb8c87f2cb49f3950009166d0b6b281_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2eb8c87f2cb49f3950009166d0b6b281_JaffaCakes118
-
Size
1.9MB
-
MD5
2eb8c87f2cb49f3950009166d0b6b281
-
SHA1
aa2e6df299a385da59e3fc50de771fee8e2b4a16
-
SHA256
320817fb5c69bc9db5851988963f20fa0cd9112e0549b07d4ec581c0e75e25ef
-
SHA512
a6ea9ed7e710468580078ec6318470a7cebb2f9b13f7604dad1c86829bbd3ce02fe169a8e777e973b0ea23f9476e43e8a38506780a27c4aa02555314d0e3f57f
-
SSDEEP
49152:AwDbRkHNxErf7jlh4hF44lZLMhPidJ9Xi1R:AwPRkHjcPnWZwZ89A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2eb8c87f2cb49f3950009166d0b6b281_JaffaCakes118
Files
-
2eb8c87f2cb49f3950009166d0b6b281_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 359KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x01 Size: 1.5MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yP Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE