Static task
static1
Behavioral task
behavioral1
Sample
2b110e3d2e96fe26eb89fc8b53d8ca42_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2b110e3d2e96fe26eb89fc8b53d8ca42_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2b110e3d2e96fe26eb89fc8b53d8ca42_JaffaCakes118
-
Size
289KB
-
MD5
2b110e3d2e96fe26eb89fc8b53d8ca42
-
SHA1
515dcab36c7097ed32a0869b71f33b46861b5d07
-
SHA256
058b2eff66066f1577ce39ea6114c5b28fe0339afcd3d6a45c2961a4d005a646
-
SHA512
539f40525b5e10a2042e6e646596875406766b4693899a2c40d59dbd4b03d6715fcb64e06884f5788e23ed7cc96c0ad1e031bb146c862f37fd96b6bbd94bee22
-
SSDEEP
6144:HkSQ+srNxgUFe2TixXcDFAk1bjRXi7didSYDscG:HkfHFg2TiFm5J1XsdiJHG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b110e3d2e96fe26eb89fc8b53d8ca42_JaffaCakes118
Files
-
2b110e3d2e96fe26eb89fc8b53d8ca42_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mjg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE