Static task
static1
Behavioral task
behavioral1
Sample
2b605c497bfcee718fb0f4fef62af00a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2b605c497bfcee718fb0f4fef62af00a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2b605c497bfcee718fb0f4fef62af00a_JaffaCakes118
-
Size
715KB
-
MD5
2b605c497bfcee718fb0f4fef62af00a
-
SHA1
d75f89cc1d6a4a5a1fee171aaf5f22704c2b89a0
-
SHA256
610aadf234bb8ad42b7e32cd4f105a7f5edaf604ff7cd5caff5e44e414a511f2
-
SHA512
96ff8032e5becaa77f379a75a05763e162e4c90d67bb2d98bf1400ea0c64145562ad8f166c6574aded4a86b14d7b8bd92fd746cdcaac8d0ed623b5aff506e3e2
-
SSDEEP
12288:zq/KCTgUCCL+Fcz49M6RPJY9HARmfslSQKQFpScu9pP/6PXXpwG53IUwLBBMrMYi:zq/K8gHpz9M6RhY9gRmfUKQluPP/6/pA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b605c497bfcee718fb0f4fef62af00a_JaffaCakes118
Files
-
2b605c497bfcee718fb0f4fef62af00a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE