Static task
static1
Behavioral task
behavioral1
Sample
2a7b5ba8cf8189d1aeb09497deb44aed_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a7b5ba8cf8189d1aeb09497deb44aed_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a7b5ba8cf8189d1aeb09497deb44aed_JaffaCakes118
-
Size
25KB
-
MD5
2a7b5ba8cf8189d1aeb09497deb44aed
-
SHA1
f5e21a7e5b1c12db0b02368f78458e9299ee1eda
-
SHA256
de5ed32ab11fc7fe18e8e9f257a3a7b65cec060d1e3ee2e5eea9f0daf92f6358
-
SHA512
ebd96082740f49e03efa723ea0fca841236a8f3e392f43f861fa2b49d2b3f2744c39bcd257ae1cf6110a45a065fc7b1784f69ef4e75e43c587332ed34207baa0
-
SSDEEP
768:cwejzaLQLQdmJfZVJkDm0VQLnoQrKg/cn:cZjzBQdmJzzo2VQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a7b5ba8cf8189d1aeb09497deb44aed_JaffaCakes118
Files
-
2a7b5ba8cf8189d1aeb09497deb44aed_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE