Static task
static1
Behavioral task
behavioral1
Sample
2572ebe80a24efb3d3c0adf1b3150ca5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2572ebe80a24efb3d3c0adf1b3150ca5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2572ebe80a24efb3d3c0adf1b3150ca5_JaffaCakes118
-
Size
49KB
-
MD5
2572ebe80a24efb3d3c0adf1b3150ca5
-
SHA1
804e1fc16150ed3a8d8ba61d665b449c85967009
-
SHA256
07fee396b44c2bae8d3c280aacd58e3ead018182fe47aab507f0c1b6849ba2f0
-
SHA512
6cdb4ad0776d7a90643f397d432b00ad5670973a78471a10b95b895ee4b5902addf0d1c1bdc6820be8411ce8d683b271ff9253b083164a23f99a701c85c15c52
-
SSDEEP
768:lZf+QNdwoheQHWQxa9a9frUmb3proLXCs4bRTb3YFemZkK+xmtb:zGOhUQxdVV3lFjYFem6C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2572ebe80a24efb3d3c0adf1b3150ca5_JaffaCakes118
Files
-
2572ebe80a24efb3d3c0adf1b3150ca5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�ZR0 Size: 9.0MB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Z3R0 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc_ Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�A.Vi.RA Size: 9.0MB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�F.U.C.K Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE