Static task
static1
Behavioral task
behavioral1
Sample
2fa56fdd0f5c2fab8678ca75992a54ed_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2fa56fdd0f5c2fab8678ca75992a54ed_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fa56fdd0f5c2fab8678ca75992a54ed_JaffaCakes118
-
Size
23KB
-
MD5
2fa56fdd0f5c2fab8678ca75992a54ed
-
SHA1
f17ac9c18b5f6ba1f64c1bcff1ae5df68587fe66
-
SHA256
7797a6f9ba54af06d5859f2ecc190ba8ef68f0d3bc931260c3a640a94723f5dd
-
SHA512
a80e08d472ea73c8692e8e2b70862f52c9afe208ace4e6af94a71691c7705899f22117a9d28e47a76437786f013297a0cf4658df6002e90652ed8da3ee0d29fd
-
SSDEEP
384:NPF+jU7irtczsCPlfgMYATLiH5LcCBZVgi6iX0VAEGwvwRWXGZCQ0QnPIqR30m+:pFlsCNgMbTLE7zX0iHWXtQ06PIq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fa56fdd0f5c2fab8678ca75992a54ed_JaffaCakes118
Files
-
2fa56fdd0f5c2fab8678ca75992a54ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
n=g>Ku[8 Size: 512B - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
TT,'vu,o Size: 18KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
(A02(tX0 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE