Static task
static1
Behavioral task
behavioral1
Sample
2f1145be6c35ea13887c55bc50bb5cfe_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2f1145be6c35ea13887c55bc50bb5cfe_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f1145be6c35ea13887c55bc50bb5cfe_JaffaCakes118
-
Size
178KB
-
MD5
2f1145be6c35ea13887c55bc50bb5cfe
-
SHA1
cacaf7b737b2531357f31bd2341d0c44da4d8419
-
SHA256
8840a3e06bca30c0334a424985458154a1d0ea749b2d6a853adecff335b3fc5e
-
SHA512
b4278efa6ac5e641e7329b5e253eaff2d1fe1407e2da5fa011b4c7c962f25722723ed247b63220ed38eb4c3952f52e601d1e0cbb6bd895a77a1ae03e0b633ef1
-
SSDEEP
3072:9eGOFdDgKLfdOfzRAGo2HyqkhRB36xdaAj55lzqxA19tDbAB2xpsEZYWQ8CHWqSh:ol7LUbuGo2Sf36xdTvlzq2ftDEB2EEZF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f1145be6c35ea13887c55bc50bb5cfe_JaffaCakes118
Files
-
2f1145be6c35ea13887c55bc50bb5cfe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Kh-;e,)e Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
M n<iv"_ Size: - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1?5@)VOh Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
k$s8Uv?K Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
D't#:!Kb Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oWrUg+(@ Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
>>R'pVlf Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
f$1Sy&W1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
7U/+L03i Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mini9 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE