Static task
static1
Behavioral task
behavioral1
Sample
2fb56aa163de881b007f06962efc8aef_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2fb56aa163de881b007f06962efc8aef_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2fb56aa163de881b007f06962efc8aef_JaffaCakes118
-
Size
51KB
-
MD5
2fb56aa163de881b007f06962efc8aef
-
SHA1
9fa5aa0ae37f4b0191a91a50cc46e7e7b4ddd7fd
-
SHA256
733ba15dd8f7ca458f2a52210d3c1f069652bf10104b26b69128f063db46f5bc
-
SHA512
8725f2aeaaaf13009ee61eaacfbf58ce742e59511a7b5adcd08963a31d1a0e74faca2d1bbd1413935d14f4c35e90311a8a86a78b052032884b7f196be522f939
-
SSDEEP
768:i0DltTvmxAkY+a6VO9y5cKcmaCykiMVBkagxf3ZES3OA2nxkLIW+jtqMw:i00xok5cKcmcTEBwZ3ZETA2nasWV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fb56aa163de881b007f06962efc8aef_JaffaCakes118
Files
-
2fb56aa163de881b007f06962efc8aef_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE