Static task
static1
Behavioral task
behavioral1
Sample
2f66368216a8574a382336c2ac885189_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f66368216a8574a382336c2ac885189_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f66368216a8574a382336c2ac885189_JaffaCakes118
-
Size
362KB
-
MD5
2f66368216a8574a382336c2ac885189
-
SHA1
aa2ea76ad0ed4a43d3de3b9ee8dee3210f205b9c
-
SHA256
7a1c91f5047838b3098fce736e787181e55c2043ccf949701ba9e687aa8e7b25
-
SHA512
8cd621e11ba7a295df0e244757fb9c88a912e841a2de1b060c9f3b6ad0c9b31c9b66e973c4f9da39d44491c8bd55bcd36bd90145ad647de1d6d258da73c382d0
-
SSDEEP
6144:mrJxFjooUdF2idZecnl20lHRxp3g6e0M6E81xS0WcHpsFbBqOq:mlxtJUnF3Z4mxxE0MHoTAFbw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f66368216a8574a382336c2ac885189_JaffaCakes118
Files
-
2f66368216a8574a382336c2ac885189_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE