Static task
static1
Behavioral task
behavioral1
Sample
2b38b99f18bee03e4f9dd528527545ba_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b38b99f18bee03e4f9dd528527545ba_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b38b99f18bee03e4f9dd528527545ba_JaffaCakes118
-
Size
352KB
-
MD5
2b38b99f18bee03e4f9dd528527545ba
-
SHA1
7c531e9d899af264442264561e2019efa6fe6383
-
SHA256
c7e3a9f27cd22b537be7248e5eb71079aff40ea0552e9432cef95b8efe09b581
-
SHA512
0f86bb833e6302acc534cd7255e747c8b984cff9b9c2de4c33930031af8306c70c81e080c71449f41fd6f6d2ef1dbf68b848487995a4b6bfaa3ff1f344dcfd54
-
SSDEEP
6144:eHW6ofOvRyj3KF88UnyCNLZKoDvvRrm2eBb7M1f:eH7ofOvRy2CFAoDvvqbo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b38b99f18bee03e4f9dd528527545ba_JaffaCakes118
Files
-
2b38b99f18bee03e4f9dd528527545ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
data Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE