Static task
static1
Behavioral task
behavioral1
Sample
2b172bc4b817c536d5a23c29643faab3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2b172bc4b817c536d5a23c29643faab3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2b172bc4b817c536d5a23c29643faab3_JaffaCakes118
-
Size
344KB
-
MD5
2b172bc4b817c536d5a23c29643faab3
-
SHA1
9fa6700e82d404bbcd5c675440755b7785c1d071
-
SHA256
6d022935a655192fd3b1d699f3bd9cc879588077e43ff8c36037138655c578e2
-
SHA512
241008ba819ec3186952b47e59755f9fdeeea0f935bcde5243db60e14ca47344b7247e4bce22d38dfd75a6ac094f513d9c530a98c9a3b8d202c5aef44422001b
-
SSDEEP
6144:WhhdARFShv+C+e+GNLBRRA7VIb/A2kJle/Ngt+TYB/VAqTyXieUyQJ/VU1PTL8kV:QhduFev7+0N1RqmIs/2UYVVDmXi9yQJ4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b172bc4b817c536d5a23c29643faab3_JaffaCakes118
Files
-
2b172bc4b817c536d5a23c29643faab3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ