Static task
static1
Behavioral task
behavioral1
Sample
2faabb84e97a0cc57c85763f753b95fa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2faabb84e97a0cc57c85763f753b95fa_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2faabb84e97a0cc57c85763f753b95fa_JaffaCakes118
-
Size
232KB
-
MD5
2faabb84e97a0cc57c85763f753b95fa
-
SHA1
be0f2fd9b157bfbd41efa0e0bbfc0782960867e2
-
SHA256
c74ff95dcc3b05b345f39c12d25f7c2ecc968b5e9630ba384eea076d8387c784
-
SHA512
e0fb3aae86d30f1ed9cf090cb89f8e07d667a42739cc5b5f8fecb8ee830a79c76f4bf85a16360d07f2d53296de530fc2e8f974be87e3e784344b979ec1522144
-
SSDEEP
6144:9hbZ5hMTNFf8LAurlEzAX7o5hn8wVSZ2sXJ6:vtXMzqrllX7618wN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2faabb84e97a0cc57c85763f753b95fa_JaffaCakes118
Files
-
2faabb84e97a0cc57c85763f753b95fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taz Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE