Static task
static1
Behavioral task
behavioral1
Sample
2fd2f728e73d10a3eb810f1bc32378ee_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2fd2f728e73d10a3eb810f1bc32378ee_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2fd2f728e73d10a3eb810f1bc32378ee_JaffaCakes118
-
Size
116KB
-
MD5
2fd2f728e73d10a3eb810f1bc32378ee
-
SHA1
8781566511b4637684d9e842ebf6dd1bda4d14fb
-
SHA256
8982fe4bcfcd4210de1c0ca25a12ab10573bfeb12ea10143ce85fbb1ec7da672
-
SHA512
e1bc01e8384d8c5c555df047890b8a18a12a19042ffbe195ef187bc6e2bf1488898e998cc0e4262b97d737aeec9045463181bba2f7f08d41e1144c376351b91e
-
SSDEEP
3072:ddkGSaLT/o4Cx/PgtdTSVFrmXvqhVVkQRnCQOX2/:vkGSX1oSVDlnC0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fd2f728e73d10a3eb810f1bc32378ee_JaffaCakes118
Files
-
2fd2f728e73d10a3eb810f1bc32378ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
hnmpt Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rc Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
krl8sh2a Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE