Static task
static1
Behavioral task
behavioral1
Sample
2a61a9b989b2d2ba5b082f7174246505_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2a61a9b989b2d2ba5b082f7174246505_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a61a9b989b2d2ba5b082f7174246505_JaffaCakes118
-
Size
1.3MB
-
MD5
2a61a9b989b2d2ba5b082f7174246505
-
SHA1
b0b52d39e18c1362a27e08d78c9c843260c6c5cc
-
SHA256
aeee4cb5d77c7bdefadb8ce77b0c16eadf2142192906f5aa223670353a5c155e
-
SHA512
c8a3701857f0282f775599b3114ecfef4c9f17823b92f7ab25e65b1ae19f756e709aa5cbf7a1b56e367e391c0424f276c36b9a0900b786f4eed58be0fe6d8ca3
-
SSDEEP
1536:PeDSj/2SpRoIPtJvTSaXRjVn5hA95R0iUdJPxp79/aq1+nMDmOwVgzKnHT6kbUhw:Pe8+Sbo2GmVn5E1so
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a61a9b989b2d2ba5b082f7174246505_JaffaCakes118
Files
-
2a61a9b989b2d2ba5b082f7174246505_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6.9MB - Virtual size: 6.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ