Static task
static1
Behavioral task
behavioral1
Sample
2eefe171aea563268d87b0d8433f4631_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2eefe171aea563268d87b0d8433f4631_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2eefe171aea563268d87b0d8433f4631_JaffaCakes118
-
Size
219KB
-
MD5
2eefe171aea563268d87b0d8433f4631
-
SHA1
0031fab89768a4e3f52ffe6afb3326d0b0c19f40
-
SHA256
9afe6912b329589aed53b0d95bfbae76849a8c32a8e4bd0dacc95dd96dc60f0a
-
SHA512
4a53fa8436e69c07f302662a7d6ad1c6a3bb30306eb2ac472c0be104bf455846f9ac67de82850793637b397584a2c4faf65370191ac7d6f4f3ec37ccb405428c
-
SSDEEP
6144:006tVCj61Umec1T11EGWgJBLIJXoax6PqVh:0B7R1U1c1T7HXHEJXoZP8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2eefe171aea563268d87b0d8433f4631_JaffaCakes118
Files
-
2eefe171aea563268d87b0d8433f4631_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 535KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 42KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sblpk Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE