Static task
static1
Behavioral task
behavioral1
Sample
2ece1df96645c6369dfb413254dda964_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ece1df96645c6369dfb413254dda964_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ece1df96645c6369dfb413254dda964_JaffaCakes118
-
Size
318KB
-
MD5
2ece1df96645c6369dfb413254dda964
-
SHA1
43d4b0247f519283af722da33936abb4b39cc237
-
SHA256
2ff6698f71dac0d4bfddf0c44f5c2665e926970d5130cb231492507546fb2aec
-
SHA512
b5600fa482b123cc551ad5037608dfdad2a746fb5237e4418ca16bc70abd288e2b96890a3d5922afda1cf5a4bcc5603d86234d17cdf244a81e47d20f9de16b9e
-
SSDEEP
6144:ZGhnajAfVOSaRY8pwNW2Vi5Gokec2DzWXBxfgM3j0gO3obgPEoxa6s8e2HTH:ZGlDVBaRYKydVeLjDix6MT0HdmKz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ece1df96645c6369dfb413254dda964_JaffaCakes118
Files
-
2ece1df96645c6369dfb413254dda964_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
packerBY Size: - Virtual size: 664KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 314KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE