Static task
static1
Behavioral task
behavioral1
Sample
2f81af5960c2d0dd4fc0216d93fd2d73_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f81af5960c2d0dd4fc0216d93fd2d73_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f81af5960c2d0dd4fc0216d93fd2d73_JaffaCakes118
-
Size
39KB
-
MD5
2f81af5960c2d0dd4fc0216d93fd2d73
-
SHA1
f5b1947b705766493c412878797c392ca41ca61c
-
SHA256
5fa15dc4a2347d4a075f7318d026c4ee14d57c019550c08c55fe31372b7abfaf
-
SHA512
1b3ff2685aa3d0536fad05034717291a6de71917f43bda5d00e6c1bdc1c85402a43ffe408c0ba1d3e1f70ba16a23155d1191fd53d00e1ada31d5d91b71c3789b
-
SSDEEP
768:GFrgcBRCj0TFQNkOTx3y+rr+6ov3y9Yv/xC7CzDPsmQVhv8sC:GBRPCwFQNkOpy+X+d3y9Yva4DPkVhv8V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f81af5960c2d0dd4fc0216d93fd2d73_JaffaCakes118
Files
-
2f81af5960c2d0dd4fc0216d93fd2d73_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE