Static task
static1
Behavioral task
behavioral1
Sample
2fd1d2415e54e697979b771591ec4d83_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2fd1d2415e54e697979b771591ec4d83_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fd1d2415e54e697979b771591ec4d83_JaffaCakes118
-
Size
178KB
-
MD5
2fd1d2415e54e697979b771591ec4d83
-
SHA1
076c850ccb0959efff737a6a5ebd721fedaf5c37
-
SHA256
5baafb4a5c8ba8b48c3207680aba359f33cbc104fe59f633f6b48b1a27dc22fd
-
SHA512
c678b7c6a79bce0a35e4b5deea678b4129dca63c506f40e89a1e0615ed38c56e172087c6e47bd58e876e538ce8895ceefff72eed6e44581f1946e1d3324ac9e2
-
SSDEEP
3072:cKKQ/y/Onh7CuWx90SGrexorkpkFmslDXNHQsxdf6Pr1fvIKEdTzuhOChC38usHA:wvPQkpkFmGDX9Qsxdf6Pr1fvIKEdTzuA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fd1d2415e54e697979b771591ec4d83_JaffaCakes118
Files
-
2fd1d2415e54e697979b771591ec4d83_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.1rbqoo Size: 1KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kc30xj Size: - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fbntot Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.amxwmc Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i3keo3 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 956B - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tss Size: - Virtual size: 3.0MB
.rtss Size: - Virtual size: 436KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 118KB - Virtual size: 120KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE