Static task
static1
Behavioral task
behavioral1
Sample
2fee8a4180e229391949e260e472e66d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2fee8a4180e229391949e260e472e66d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fee8a4180e229391949e260e472e66d_JaffaCakes118
-
Size
19KB
-
MD5
2fee8a4180e229391949e260e472e66d
-
SHA1
00241e4d6c6c2ddbd086c1120360e3be2ff42666
-
SHA256
1ef91d77f5d46eaf9b1ee663f7c3138fe6d7614e96756a4991e94200e64311fb
-
SHA512
7a774c847f345f399f7cb3d2e8f50c307eef677f69c56dadaceff319a01ec36ab2f763ca2b0703e31b349b72e6b789c991043939ff2394b87f1fb5557b98a9e0
-
SSDEEP
384:P2iypisLV2vDy2SJx2WnnklpWh4eMIeBayrGupUA/lNIdGShd8:jyEsp2eL2Wn0pWNJW1rGup/rGGd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fee8a4180e229391949e260e472e66d_JaffaCakes118
Files
-
2fee8a4180e229391949e260e472e66d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
{lk0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
{lk1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
{lk2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE