Static task
static1
Behavioral task
behavioral1
Sample
2fb972de7b312d54179a9c41837519dd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2fb972de7b312d54179a9c41837519dd_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fb972de7b312d54179a9c41837519dd_JaffaCakes118
-
Size
380KB
-
MD5
2fb972de7b312d54179a9c41837519dd
-
SHA1
92927b9d4161872044d7b5741e3742402ceba357
-
SHA256
58dcef07f7b56c31309ff2e828ddd0fdc90e7ec3a82e4b2a20e4205bae8637d5
-
SHA512
104bc5019484778137fc7e6f82836e223a6016cf6d670ca66dc3e5006df4dd1996baa2a29d4b4ead447b8534f1c37566d2c0b0c13a47c3c8280053b08289b73e
-
SSDEEP
6144:DyP/HiDMuQeNzrPoB5vmMnv4sxtPJGz04Dv0wppCzkF/wVNxGcb:OiDbRNzjo7bnv4cJGz0K1QkNaNsK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fb972de7b312d54179a9c41837519dd_JaffaCakes118
Files
-
2fb972de7b312d54179a9c41837519dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mrof Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE