Static task
static1
Behavioral task
behavioral1
Sample
2f81085cb82de12604f08dd35b07f09b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f81085cb82de12604f08dd35b07f09b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f81085cb82de12604f08dd35b07f09b_JaffaCakes118
-
Size
144KB
-
MD5
2f81085cb82de12604f08dd35b07f09b
-
SHA1
e1cc65fec1adc86e10f5449d14a169e149eb1207
-
SHA256
7b99cdcc9c6b00c9e7707165b4db75f7adbef542340789b39c543c6a8c7db19c
-
SHA512
cbccb4c0164c9a8d6a176440eaaa12de9c4c311dd31f91ddc18035ea9c46b251b0285d52d644bae90214d1b4e43b8e7ef373eb0816c314aa54f3da32b65bd740
-
SSDEEP
1536:rq5KuLDgWile5pt7/rzrfEqDG7q9PubDY8x8cCJ:rq5KQX5TPzrc77OWw8x8c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f81085cb82de12604f08dd35b07f09b_JaffaCakes118
Files
-
2f81085cb82de12604f08dd35b07f09b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE