Static task
static1
Behavioral task
behavioral1
Sample
2ec6a5246fadd2fc80d9d7b6f083f4b7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ec6a5246fadd2fc80d9d7b6f083f4b7_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ec6a5246fadd2fc80d9d7b6f083f4b7_JaffaCakes118
-
Size
40KB
-
MD5
2ec6a5246fadd2fc80d9d7b6f083f4b7
-
SHA1
9f7b0305bb38c916490ce57ce21b983396981660
-
SHA256
de742a70278b7a57a30086bd14f8532baf2b01703a598c15736400ec9ffd99b4
-
SHA512
26e78221e5b4ab0275e8a4384ce415e8c89977aad534baf21ed5235bb1b2c7b9a455fa7c42fb36e586ca082d337838de6327e2205c82a984d93b38b7752cc805
-
SSDEEP
768:McqSwYqVQuw+qdWSMu8eWP2LL9Cc5m9iV6+a404BtjjhL8BCN8x5:Mc9ZqVQcZzFcxL7lVABCax5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ec6a5246fadd2fc80d9d7b6f083f4b7_JaffaCakes118
Files
-
2ec6a5246fadd2fc80d9d7b6f083f4b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ