Static task
static1
Behavioral task
behavioral1
Sample
2fb0d5afe44c2295160d52f7a792a12e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2fb0d5afe44c2295160d52f7a792a12e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fb0d5afe44c2295160d52f7a792a12e_JaffaCakes118
-
Size
86KB
-
MD5
2fb0d5afe44c2295160d52f7a792a12e
-
SHA1
014115197728e75c1cf48f16fc428864b2f05bca
-
SHA256
1303ac60df641637ab91fb734b47705f4f6fb7a1650dcd5e9077c6dfd2d79bb0
-
SHA512
3f88df92347a7f4542b7bca888377460048cb4c4913ef06cbf2ed806bd0f5eb237d3a39289dd1d09ddf7408c253433abe84268337730d3ece826cafae167b7bf
-
SSDEEP
1536:lpncUonwhUWrYXIqZfvxu3YD2nafcjxTr6Dsrlov+/U/Y9zgbGgXBnazWrR2IqZR:XYneRrY7ZKu2a8KCxUIzZgiWrR275
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fb0d5afe44c2295160d52f7a792a12e_JaffaCakes118
Files
-
2fb0d5afe44c2295160d52f7a792a12e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
wp Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
drn Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
erkv Size: 4KB - Virtual size: 625B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE