Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_2fc1bfd1abbd12a7e672e56a77c2ec38.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_2fc1bfd1abbd12a7e672e56a77c2ec38.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_2fc1bfd1abbd12a7e672e56a77c2ec38
-
Size
109KB
-
MD5
2fc1bfd1abbd12a7e672e56a77c2ec38
-
SHA1
02f1fe712b443625e993f5379ceed9e8f0c5ef1d
-
SHA256
108642747e2414d32de711f9acc2b53488b1de153db1b5f771435af3ece10a49
-
SHA512
4139c679bf3aa14fa72fcbe1c312868c96248aa2defe2001f13aaf0f69efcddcb2c915555b60770b6a8f857610aef6897b176d2bf40e43acbfbb226275efd055
-
SSDEEP
3072:CYhix86fzQFCixL3f1fKpEZqObx4J2vNbGfvGnd3gW5ZM4/u:CQm8yzQQitfhKqZbNdndPZMT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_2fc1bfd1abbd12a7e672e56a77c2ec38
Files
-
JaffaCakes118_2fc1bfd1abbd12a7e672e56a77c2ec38.exe windows:65535 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 49KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE