Static task
static1
Behavioral task
behavioral1
Sample
2f7e60bd84fdab6903572f06b5c11357_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f7e60bd84fdab6903572f06b5c11357_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2f7e60bd84fdab6903572f06b5c11357_JaffaCakes118
-
Size
7KB
-
MD5
2f7e60bd84fdab6903572f06b5c11357
-
SHA1
83feae018b02e44e62d0c5f404b08d762b4d524a
-
SHA256
d8eb4bd3fbcbbbdfd21cfc31d3e03ca59bbd08d2ee87c1ca27c04a4e7775a3b9
-
SHA512
a2fb2471b140a57c0d552138a6ac285654525ec56451fafa5eb7d96afd31c12a7bfb19a9c662a75edae04735bd2a8f0911d17dee8a03e8071cb77e4b310355ba
-
SSDEEP
96:gm3WYONgQYDeBrT1XjHRGcVl1F4+JRWlOrxwcISTk4Vonzy6foFmbmVyeX3SNSTO:gYONIA1zHRGcVl1xRtwra9tPFnSD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f7e60bd84fdab6903572f06b5c11357_JaffaCakes118
Files
-
2f7e60bd84fdab6903572f06b5c11357_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 150B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug Size: 512B - Virtual size: 407B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ