Static task
static1
Behavioral task
behavioral1
Sample
2f700c73eba2e7a3adfe02ef23f0a677_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f700c73eba2e7a3adfe02ef23f0a677_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f700c73eba2e7a3adfe02ef23f0a677_JaffaCakes118
-
Size
83KB
-
MD5
2f700c73eba2e7a3adfe02ef23f0a677
-
SHA1
66c6dfe147f3969e4543b4d3f7d618df5a8c5bbf
-
SHA256
59ea74fbf8102c2eddb41257e7c9f7cbb8328ebd86113670e83f5bb66316bd60
-
SHA512
96b6cdcba7c9af3e9e5a1d5e4c527958d29d95a8c1106cc7a38d607d55c75c5facefd54776ea3e506fe6d12e2ffb01c3dd1e344f1ac840472d191a9d711ac730
-
SSDEEP
1536:fnWeFBo3YBeqd1shUmtS1oNhSyDMxkIrKChLZ36JxjIt8Y6SldPXm4Ihuwp:fX6eNk6m8qhVSrKCT6JxjElXuwW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f700c73eba2e7a3adfe02ef23f0a677_JaffaCakes118
Files
-
2f700c73eba2e7a3adfe02ef23f0a677_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 841KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE