Static task
static1
Behavioral task
behavioral1
Sample
2e1e29329cee14728ebd4aadc85bdabe_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e1e29329cee14728ebd4aadc85bdabe_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2e1e29329cee14728ebd4aadc85bdabe_JaffaCakes118
-
Size
1.7MB
-
MD5
2e1e29329cee14728ebd4aadc85bdabe
-
SHA1
d1a3adc9760f41bcf60891a43fcf53c12ef4e5de
-
SHA256
bcd674f490c88274f52aba2c3280d338f7998f609eff85af742e44e6cb01b762
-
SHA512
e2a8b1bbbb5f3b26084b9b8e937d3c0a0ec787db20d97b5aedb55c3d407e6fc6f79b89ca71c79cba1b3f02544969936a0b9053f2d4279fdbb9a9d3d9e97d7d9f
-
SSDEEP
24576:LZusv/DwNLHPJH6pYCkeKW/8XwQmRtPF+mviWavPzBBB51MLDptzrLf9bk27qLQ:4sv/GvtkHKW/8XwQUhahtN23pxrxeLQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e1e29329cee14728ebd4aadc85bdabe_JaffaCakes118
Files
-
2e1e29329cee14728ebd4aadc85bdabe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 932KB - Virtual size: 930KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 462KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ