Static task
static1
Behavioral task
behavioral1
Sample
2588dbf74a0f2f61be045ba5db2f4b12_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2588dbf74a0f2f61be045ba5db2f4b12_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2588dbf74a0f2f61be045ba5db2f4b12_JaffaCakes118
-
Size
2.6MB
-
MD5
2588dbf74a0f2f61be045ba5db2f4b12
-
SHA1
2ecec3060096757b651c2579ece02bbe71478ee7
-
SHA256
ce2d9c3ac455c2948ef82c48ead27af2e13217eec983421ad035cd81dc4f48c5
-
SHA512
d10f1e1976a70b880fb6372255afbb2981acfaf99e212b61e4d86f8a0ec61719de01c6fe31772130b9c6c4c980357c27a018bf71da55410ab12867074b477af0
-
SSDEEP
49152:kYCPtzgW6V1TdAykxIunL8GyKQ/0KBiqXIRV7LRdvt0yGPUMZW6R22Gb3:bCPtMW6V1TbcQ1/piXLRdvWyGPZW6R23
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2588dbf74a0f2f61be045ba5db2f4b12_JaffaCakes118
Files
-
2588dbf74a0f2f61be045ba5db2f4b12_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 2.6MB - Virtual size: 12.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE