Static task
static1
Behavioral task
behavioral1
Sample
2f8fb206efcf81fe12e35ad693e9dabb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f8fb206efcf81fe12e35ad693e9dabb_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2f8fb206efcf81fe12e35ad693e9dabb_JaffaCakes118
-
Size
760KB
-
MD5
2f8fb206efcf81fe12e35ad693e9dabb
-
SHA1
7d54a54fe0d196e330482980fabae3500d94a451
-
SHA256
a253c4360fe785b8c76f86d2ee002815c1c79417834da98c3122c91520cf9baf
-
SHA512
27eb2c58d250a8d2199f5d9141976627ab6db4f907b7dd84f83c7ffd48d2e0bb057ea9fb5d217240aff6de0da9186b76a6e67f16dc60356c42b931553a6bef97
-
SSDEEP
6144:5P4hYVDj1DCfkeb3CGWoaOaNAziZLthUYthtA4rEwyTOlQb6L4OtDsnjpJo9ydi9:l4WVDjQteLtth3Xl06LBDsnlGydQ+N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f8fb206efcf81fe12e35ad693e9dabb_JaffaCakes118
Files
-
2f8fb206efcf81fe12e35ad693e9dabb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 456KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tzn Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE