Static task
static1
Behavioral task
behavioral1
Sample
2b0758b13e6f00490c6e0e03b7b90f66_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2b0758b13e6f00490c6e0e03b7b90f66_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b0758b13e6f00490c6e0e03b7b90f66_JaffaCakes118
-
Size
31KB
-
MD5
2b0758b13e6f00490c6e0e03b7b90f66
-
SHA1
50a9b1c524fecef5ceef2e88f6e373e71bde883d
-
SHA256
ae47e6fb4882e725c7d9fa3645f5473086da1ec3f1809498bbcdc36cc3b6fc82
-
SHA512
6b1a1a4e9300d1f12820b9831b3fd6e0e20af3f74c40f7372daf5ff86dd26014afc32795354836d6b11e63617c31167c11305c0927d56c940747b9594dcf36f4
-
SSDEEP
768:rSAQLX2Uwv7WVDySniNcbWGhWY9tofPevTpRKhqeKtJ7QmapHH17U:rrU0v7BMN9tmYTpRKhqe+J7opHH9U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b0758b13e6f00490c6e0e03b7b90f66_JaffaCakes118
Files
-
2b0758b13e6f00490c6e0e03b7b90f66_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.prog Size: - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE