Static task
static1
Behavioral task
behavioral1
Sample
2ed5191d7fa52b92d41c19de1f0a477b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ed5191d7fa52b92d41c19de1f0a477b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ed5191d7fa52b92d41c19de1f0a477b_JaffaCakes118
-
Size
197KB
-
MD5
2ed5191d7fa52b92d41c19de1f0a477b
-
SHA1
f9c38d4c500c80bc353353efd65f63fce307781c
-
SHA256
6dc3d07a2baab41d14d6d9a3b664f547a18b1f3b3ecac6377ce7fb5da173559b
-
SHA512
e5869229f47fecdae0c96f4fe888a91e1d3752b7013c4a5d6958944530b1f82b2b27b502e982b4794129a8985cc788848fae4d4efc8d0ec6893431084519efcb
-
SSDEEP
3072:PeOWGdzMrgfbfAFbVu1keSoXSjq2RFb4lhexmUIp7gvtyeCVOPAr9eRHgE5e96rj:AGvbfOY9rXkKgxmUIp7It6pUWEW6rNh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ed5191d7fa52b92d41c19de1f0a477b_JaffaCakes118
Files
-
2ed5191d7fa52b92d41c19de1f0a477b_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�p�� Size: - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
�[�� Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ