Static task
static1
Behavioral task
behavioral1
Sample
2fed70c9a2139acf10333d2b56573758_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2fed70c9a2139acf10333d2b56573758_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2fed70c9a2139acf10333d2b56573758_JaffaCakes118
-
Size
64KB
-
MD5
2fed70c9a2139acf10333d2b56573758
-
SHA1
20a33ec063961fff079c15a73a2bf62ed932267b
-
SHA256
de97656e5f3a6ee8c98c9af1c56561ad98ebbd84bd0f3df4fb11fcd9ccabe500
-
SHA512
60ef6eb31e5f3e2b8ac8e666961101576f2db1ef7ac072324334c204f6582a62057264c4b6615b9496baaa0377285a80d8a95a0b95430d54b14feb41dcf27bbc
-
SSDEEP
768:CLtO3W2X/gb3mzmw2e4CVXNOmcRdSSu/Ua1kMAXLxRdCoKUPMaoglhqkpFIp1unL:CLgW44e9ISSUUaLAXLfg3UAgXqk3Sn3u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fed70c9a2139acf10333d2b56573758_JaffaCakes118
Files
-
2fed70c9a2139acf10333d2b56573758_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 207KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ