Static task
static1
Behavioral task
behavioral1
Sample
2ef9fbb748365a9bd55b43d99e4d6623_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ef9fbb748365a9bd55b43d99e4d6623_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2ef9fbb748365a9bd55b43d99e4d6623_JaffaCakes118
-
Size
186KB
-
MD5
2ef9fbb748365a9bd55b43d99e4d6623
-
SHA1
6b356e4494fe40c56629a42c4029f073e3a0b439
-
SHA256
014e2a4cb202c36501d8f5ed9b504576b2627fe10e59e1cb78bdf26f1aaffb9c
-
SHA512
5dea3411c606dec31f8a052acbaf1fdd84a2e85231372eba95da2632406077c839bac5f922b93d1be41377484a7d7b92490df2e37db2dc2e9d5fee4c5a549781
-
SSDEEP
3072:mK4RM2LdX/jBenNjKCCCCyRrE+vmor5jwxIrseCQ8cuhIcjZjHHE7Oup+Brdj:mt1dvjBE4CCCfo+uq6xIrshxgclk7OQg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ef9fbb748365a9bd55b43d99e4d6623_JaffaCakes118
Files
-
2ef9fbb748365a9bd55b43d99e4d6623_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.itext Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rtss Size: - Virtual size: 3.0MB
.packed Size: - Virtual size: 404KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.debug Size: 137KB - Virtual size: 140KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE