Static task
static1
Behavioral task
behavioral1
Sample
2fc85ff35744ead884d2d1b7700a951d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2fc85ff35744ead884d2d1b7700a951d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fc85ff35744ead884d2d1b7700a951d_JaffaCakes118
-
Size
326KB
-
MD5
2fc85ff35744ead884d2d1b7700a951d
-
SHA1
ca1bfa62eda96236181d50719fa9c141107d7745
-
SHA256
1999b174e4a1a6356e0f5180422f92c8ebd32c4343e1a8399aac94522f0b2977
-
SHA512
37cb5aa775115b302d4b9ebd58e308bee8d28426fec207555606d2d31f35ef4fb53e0fa103ed5289037dd3b031f8080c70425f01343d8c7e7ecb981d3f5e04f2
-
SSDEEP
6144:hYFTmgrE8juY6gaM7D9k/8ulS/ZXnPIDtkGd81f4HeXaHgzExnRdUh//Gs:qZbX9N7Bk/8gSBXPItIwHDHgvhXGs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fc85ff35744ead884d2d1b7700a951d_JaffaCakes118
Files
-
2fc85ff35744ead884d2d1b7700a951d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ