Static task
static1
Behavioral task
behavioral1
Sample
2a5ab22fbc9f4a4a42d56aac51882374_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a5ab22fbc9f4a4a42d56aac51882374_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a5ab22fbc9f4a4a42d56aac51882374_JaffaCakes118
-
Size
267KB
-
MD5
2a5ab22fbc9f4a4a42d56aac51882374
-
SHA1
31f5d081b1d8ca11bdcb097e3e61ccc2162c79df
-
SHA256
d3fa1b573205ea85881f6a32dce9a40483b9ace3b67ca833a79c619b153c96a5
-
SHA512
e7c0f9f9ce6193266f69d81c62803d8596110af7706491b62b0b9684c620992a38d95a0ded1a60a09b51dfd3a0cfce1bcf2e0827d4afe71c7daf285dfcf58a87
-
SSDEEP
6144:280sv0Y6tGGkfTO2w6D1qevqOrNnkuIrs2mE9KjBKwkkb9Hhx3U:L0ZYdTlJvXp9bNtPkg9HY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a5ab22fbc9f4a4a42d56aac51882374_JaffaCakes118
Files
-
2a5ab22fbc9f4a4a42d56aac51882374_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
�W� 0 Size: - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�W� 1 Size: 266KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�W� 2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE