Static task
static1
Behavioral task
behavioral1
Sample
2f4af2fa257ac27562c8fd3c85236a74_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f4af2fa257ac27562c8fd3c85236a74_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2f4af2fa257ac27562c8fd3c85236a74_JaffaCakes118
-
Size
39KB
-
MD5
2f4af2fa257ac27562c8fd3c85236a74
-
SHA1
00d5e759de72db9b3213157d0d15041a94270dd7
-
SHA256
a0cdb6ae737aae34e73c68b599c0d3b249c833245c302cf5cd2947163556d34f
-
SHA512
50123b03d256d6af14195b67eed425fd4d4e79011f2ee25f758493dd5be3badc9327872ef81ddb5f740f3c7f6180c0ad195151c8869552512204d765838e7ca5
-
SSDEEP
768:McyoOWRWub+/EQm3QNIsHwHhOoHdBTd1d16cC0H4XfVON+JqDsL:Onkam3iHQBOo9PLJC0HyNE+JIsL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f4af2fa257ac27562c8fd3c85236a74_JaffaCakes118
Files
-
2f4af2fa257ac27562c8fd3c85236a74_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
SFGWVETV Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
Aedcqwrf Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
ADFWFWW Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
ACDWEEFW Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
FDWFVWR Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
DSVFWSGV Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
DACFWSFV Size: 26B - Virtual size: 26B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FERGWERT Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.NewSec Size: - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE