Static task
static1
Behavioral task
behavioral1
Sample
2f6f138c90e8a2b248ff7208c32332fd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2f6f138c90e8a2b248ff7208c32332fd_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f6f138c90e8a2b248ff7208c32332fd_JaffaCakes118
-
Size
331KB
-
MD5
2f6f138c90e8a2b248ff7208c32332fd
-
SHA1
0ddef57cf42f3eb000d5d04437652f8828a23e29
-
SHA256
199e401d3da3c9e03d9116faaf2ee75acd29ce17369650747971f68d67b24761
-
SHA512
026e353156c44b211e3dd768d6e68c3c437f13bd3ba23c752f9f8d0e88ffa92ac05743f2a4256cd225a22f2ebc8442d488dc17e201dd8f294916b99e40b902c8
-
SSDEEP
6144:LY+IXCYXZdOMpAITWYqxz6PpZ/K69a9W7rqcSdAFK1l1hPcSUVFZ0r:s+iHpbqxzapKsejdAFK1FcStr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f6f138c90e8a2b248ff7208c32332fd_JaffaCakes118
Files
-
2f6f138c90e8a2b248ff7208c32332fd_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 296KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE