Static task
static1
Behavioral task
behavioral1
Sample
2631a8a49d5ef8aaa28f9f19fc328e7a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2631a8a49d5ef8aaa28f9f19fc328e7a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2631a8a49d5ef8aaa28f9f19fc328e7a_JaffaCakes118
-
Size
107KB
-
MD5
2631a8a49d5ef8aaa28f9f19fc328e7a
-
SHA1
1ae029307a2ab7c952c6f3cf35dd357f0b7de3ca
-
SHA256
3e527d9940f182e61ae51f05979c49cde92816299ca904cf6f125b36ae9d6e8c
-
SHA512
4575852bc8a5954eb336d4cb2a343c3f725b41d75b762828ebc5822ee391b386d39a00bb6754c205bd88be370e9b88129637c051e4b321df34e5a59b7853f308
-
SSDEEP
3072:Zb7yoeJKMJcP2SA9Y5k2M1esr7JCpoutK6:17yoeJKecP2SAG4esPYoSK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2631a8a49d5ef8aaa28f9f19fc328e7a_JaffaCakes118
Files
-
2631a8a49d5ef8aaa28f9f19fc328e7a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
BNET Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GGSV Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE