Static task
static1
Behavioral task
behavioral1
Sample
2fb4393f9da3e229974071bef8c5f065_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2fb4393f9da3e229974071bef8c5f065_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2fb4393f9da3e229974071bef8c5f065_JaffaCakes118
-
Size
36KB
-
MD5
2fb4393f9da3e229974071bef8c5f065
-
SHA1
82b9ccea7b60e61934584e3e42522250e09cbc25
-
SHA256
3245dbd12bf1807b9665fe89037300d4a951d7598659750bcacb6403fc12a2b5
-
SHA512
12a17d784e64d64456f255147c684c4f24f434c3db870acdd1c6bc05535222f82b8c8514ef2c5ef326c341c92558e48423c2d6b800bb434aeded98dbdeebd9ee
-
SSDEEP
768:Av8Ol0t5mnb3N8uuDpH0u9wpDRRbOioTqgSf8EV1vJs:A1lpSDCYGz3j8E1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fb4393f9da3e229974071bef8c5f065_JaffaCakes118
Files
-
2fb4393f9da3e229974071bef8c5f065_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packed Size: 17KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE