Static task
static1
Behavioral task
behavioral1
Sample
2f49233887b6aea345c009f679e25644_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f49233887b6aea345c009f679e25644_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f49233887b6aea345c009f679e25644_JaffaCakes118
-
Size
318KB
-
MD5
2f49233887b6aea345c009f679e25644
-
SHA1
e7702fe72c33f59fe3df30a4c651d4ce9475cfd8
-
SHA256
ae9a9fcd00d3b0b9a75385a06634bd3834c161ddbd2804c4fb23e5943dedc5a0
-
SHA512
53be2a8825ba495fec55cc0457b4ec3c5e0a458117b9875010ec3772fe15f59bde569f4b95095aebebe75361205af1baa9f75ee3765dad1ed314314d24820924
-
SSDEEP
6144:9F1xuJVWzXP6nEATPk0Kk0js2i07Wid0hn8SwfrSnIekj5qUV+qeXthx+Mlr8sE8:9F1xuJVgXP6EiMFBj0KWf8S0resdqUVG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f49233887b6aea345c009f679e25644_JaffaCakes118
Files
-
2f49233887b6aea345c009f679e25644_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.scpack Size: - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ