Static task
static1
Behavioral task
behavioral1
Sample
2f5a3c6e2b15a1751f10025affa1c8ee_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f5a3c6e2b15a1751f10025affa1c8ee_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f5a3c6e2b15a1751f10025affa1c8ee_JaffaCakes118
-
Size
366KB
-
MD5
2f5a3c6e2b15a1751f10025affa1c8ee
-
SHA1
48a54090c43370c0327bd8967c9ca1b134be1d80
-
SHA256
c15a78b7c5f41aa80410b08150e5ae73e43eac1d8556dc0b237a5aa6fd42c374
-
SHA512
588f73344817b0781d8d814563cac5286b808acf549ed6204613ce5da4838d02b32a6e9997c966c387471b3d928129ee0ec01d3663f12e529a47ae7e2d5f1527
-
SSDEEP
6144:I81c4nDWgRAkPUPNAOgQETcLjE+jFkO6o6qErtv0GPsbd7ULIv22lRV0xsY3y7Dn:t1VR3PU8TcLw+pkFoOrPsx7Uy2ERyCYq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f5a3c6e2b15a1751f10025affa1c8ee_JaffaCakes118
Files
-
2f5a3c6e2b15a1751f10025affa1c8ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.textbss Size: - Virtual size: 544KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 347KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 426B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ