Static task
static1
Behavioral task
behavioral1
Sample
2befb0672f6bcb6712ea4fd21c159a30_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2befb0672f6bcb6712ea4fd21c159a30_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2befb0672f6bcb6712ea4fd21c159a30_JaffaCakes118
-
Size
6KB
-
MD5
2befb0672f6bcb6712ea4fd21c159a30
-
SHA1
0b2f70f3dd40971c06f1f7d8061173ccdb4a5cce
-
SHA256
ab3d1276ec1c04a3e31a30906cd55a4646a61eae25a37320650bd949e05493e7
-
SHA512
cd3dcca66afedf349cbaf1511c1a30b5886db42dd637a9a9257f92b42fb5fb1e3795ddab996a5c181b94a06173ac6377150a27c0e263279ba5d19e107adcfd36
-
SSDEEP
96:gv/vP0YP9fGKG3ljAvWC61WnV+KWnhd8AejBvT6xcY1GPxwKrJdBffqQuTOn:uP0UFW3l0vdV+KcMQxjkwKNdBf5uTO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2befb0672f6bcb6712ea4fd21c159a30_JaffaCakes118
Files
-
2befb0672f6bcb6712ea4fd21c159a30_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE