Static task
static1
Behavioral task
behavioral1
Sample
2ff2274fb32dff6eac7c95ee7bed9859_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ff2274fb32dff6eac7c95ee7bed9859_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ff2274fb32dff6eac7c95ee7bed9859_JaffaCakes118
-
Size
166KB
-
MD5
2ff2274fb32dff6eac7c95ee7bed9859
-
SHA1
6bc74906bb6fa305f39d995db27cd4bb45a37f9a
-
SHA256
ca7499e7cbc93aa97fa5d20b42ee0a7f18dd4e5588c84027ab08cccfdf0e60a0
-
SHA512
74f67c284d150dc9716c9d65d1f4dd9dc0ef5bc205d9b3e1aa426a1fb9ceba6e52d28e24a07708b224812a1a8265a4bc0c8c4edcb42cefc0d8ca388f4f58a56e
-
SSDEEP
3072:IgKnPsoIsbFzkcafX/1xoTDviSO0M14AcdGpZo09Hfio54LXb94ydlQRTf:YFWb1cKS5M14Ac8wMHfiUmXb5lQRz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ff2274fb32dff6eac7c95ee7bed9859_JaffaCakes118
Files
-
2ff2274fb32dff6eac7c95ee7bed9859_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 456KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE