Static task
static1
Behavioral task
behavioral1
Sample
2fecd87948f115c4aad324f544e24d97_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2fecd87948f115c4aad324f544e24d97_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fecd87948f115c4aad324f544e24d97_JaffaCakes118
-
Size
144KB
-
MD5
2fecd87948f115c4aad324f544e24d97
-
SHA1
f5858976c2bb50dafdd305750dcd8b26785abdb5
-
SHA256
6908443c51099ce928f43971c833de4066a8a4b302ea2af92f690eb68cd6e025
-
SHA512
e81ab2916ff72b7726ba5c5bd97995c10e31f6552430671079a3c990adbec40e9e743547476ddea0ad3280db92c8d5f6af0c22da89fe8577b0473e8df6964362
-
SSDEEP
3072:TjcrKunQngXHNz1i2XlCmYBsqy0f7VMzRmle4YPvjil47tJYY34U:Tjdu4eHL91CmYWqrxMglaWl4Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fecd87948f115c4aad324f544e24d97_JaffaCakes118
Files
-
2fecd87948f115c4aad324f544e24d97_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 128KB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ebut Size: 10KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE