Static task
static1
Behavioral task
behavioral1
Sample
2a9f0889a97699878b1fcad620c520cd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a9f0889a97699878b1fcad620c520cd_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a9f0889a97699878b1fcad620c520cd_JaffaCakes118
-
Size
272KB
-
MD5
2a9f0889a97699878b1fcad620c520cd
-
SHA1
edaf316485e199e1722f87efe6cdc090c9063e08
-
SHA256
19df79753a7d1f1ba24eb1831122c16e53077b6cef6a33b1070c5f61e341ee83
-
SHA512
74b21a39c71a88fb10c95a9a64148e6467b1a3280cb6468811ed7e094f97ddca59f8d197a2b70a5c70137dcd0d4d5b684b01436e4097a29aad05910a0e22be96
-
SSDEEP
3072:eYV0aZTjUe9p5mEoOFLrZBbM8WRDgbbrZ6+m6NiL15+Eq7Kf3Wrar7arBYFoFwuo:eY2QUw/FfY8sD+QKN8Q2ZGStRImbtuF8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a9f0889a97699878b1fcad620c520cd_JaffaCakes118
Files
-
2a9f0889a97699878b1fcad620c520cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 82KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE