Static task
static1
Behavioral task
behavioral1
Sample
2b3ea03184a535626b63f0f2726fa0e0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b3ea03184a535626b63f0f2726fa0e0_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b3ea03184a535626b63f0f2726fa0e0_JaffaCakes118
-
Size
646KB
-
MD5
2b3ea03184a535626b63f0f2726fa0e0
-
SHA1
a0c4c97dc481913bb4942b4a769ca3240a0ff71e
-
SHA256
0202667e12e55620c852955e0d3162d5e4796457440834c97303a8f451be8f64
-
SHA512
df7218c2a6274570049458111e2c24f98dffecb71f6f6fcef8005dc1862515a099c0649836003a3e70bfe07452db5ec8e713a0a47eeb7b7b609a251cdf16cf6b
-
SSDEEP
6144:AI8N8WVyMezYHb/t1gD+KZ9OS3XWSROIv/S/6IaZJ/lMK1:AblVyTY7/tuD+Kz3XWSRbv5y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b3ea03184a535626b63f0f2726fa0e0_JaffaCakes118
Files
-
2b3ea03184a535626b63f0f2726fa0e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: 508KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE