Static task
static1
Behavioral task
behavioral1
Sample
2b1d355cb940df4f9e7f8840d919661d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2b1d355cb940df4f9e7f8840d919661d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2b1d355cb940df4f9e7f8840d919661d_JaffaCakes118
-
Size
885KB
-
MD5
2b1d355cb940df4f9e7f8840d919661d
-
SHA1
f3853fcfd4d8b308240dc4550f6e9cae2b7aa846
-
SHA256
ce7e0798ee143ecf5cffdf2dfacd67d781fa18d10875f2bb8a6a84c8525a1717
-
SHA512
d72bf298cd4a40375d1e8434c8008b7cd9edb7e34d63f914370a36b3510ef6bfafd8337deed19656f4b2eb6a860244b22b0229f996002329703791bfd05d4152
-
SSDEEP
12288:SvdfHAihMNGELSF5QgTAdFwdzbuARVZf3E8NwUyfrDj2l/w320Nf+CdP2nmNxOz3:SlEtLSQdHwdHFBU8crXyw3ldPJNgb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b1d355cb940df4f9e7f8840d919661d_JaffaCakes118
Files
-
2b1d355cb940df4f9e7f8840d919661d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 884KB - Virtual size: 916KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE