Static task
static1
Behavioral task
behavioral1
Sample
2bc4102ea93ce1a5b4195ebdab2ffe47_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2bc4102ea93ce1a5b4195ebdab2ffe47_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2bc4102ea93ce1a5b4195ebdab2ffe47_JaffaCakes118
-
Size
955KB
-
MD5
2bc4102ea93ce1a5b4195ebdab2ffe47
-
SHA1
633a8820dfccd66fdf97e3ac0a5680acdf46188e
-
SHA256
e851b56b30cc0390afac6640162155ce253ffcdf5ff6e08f4857ecf03facbe06
-
SHA512
ac05b8c1f97961e672f4df7060a1b9e043085254ea48f0e03fde6b8447f1e6b15f796b67e973dc8e2d432bdd8ca3b5ddc7ee74e8123824323560966f6791662c
-
SSDEEP
12288:1HqpvcoCUyZtwAvAs4wTCyrPT0yq0VezaOvoJpaz/g/J/vVoS:JGfty/wAvN7lry0VeH8az/g/J/No
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bc4102ea93ce1a5b4195ebdab2ffe47_JaffaCakes118
Files
-
2bc4102ea93ce1a5b4195ebdab2ffe47_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FISHPEP Size: 33KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE