Static task
static1
Behavioral task
behavioral1
Sample
2f2877bbab01fe59e0b56489ad09fc28_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f2877bbab01fe59e0b56489ad09fc28_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2f2877bbab01fe59e0b56489ad09fc28_JaffaCakes118
-
Size
177KB
-
MD5
2f2877bbab01fe59e0b56489ad09fc28
-
SHA1
8b29f643f4b64cd9d23033d4f00f4646a2e8cb6e
-
SHA256
9bf60afafa028554d3e9efd38e3749548a4c3666dd977d12cc242ce7416cf912
-
SHA512
bb68f73b7b2565358b71f6f3429b48c99d8696bd9539ff382b1b38be0196ba7325151092e5270e9f778927164eb1ab3c13f6aee4c18878b4bb31f73c1722ab03
-
SSDEEP
3072:sKl3D9IwagNCby8iL7NkgxOULUrnCAH5C+ZDGe9WNx3gFKR:sKlRIwag0bg7vxVLWnCAZC+ZDGErKR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f2877bbab01fe59e0b56489ad09fc28_JaffaCakes118
Files
-
2f2877bbab01fe59e0b56489ad09fc28_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ