Static task
static1
Behavioral task
behavioral1
Sample
2b8058978f67b7df174366ef5190d584_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b8058978f67b7df174366ef5190d584_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b8058978f67b7df174366ef5190d584_JaffaCakes118
-
Size
212KB
-
MD5
2b8058978f67b7df174366ef5190d584
-
SHA1
ea4468586856e0d28c3be56df3f79008765f0bb6
-
SHA256
be217d41daefd5db583053601aa60cd92f7b2c5a0563e251a076a67223161815
-
SHA512
7d9aee60df14949f067ed4e60070b0848873c48c518cc97fd58bce02f8e665e2ea7409b40b9b1e7b6d26ad691e4dc189ec3c39c68aa6e3ff6e6093f5a91f38ce
-
SSDEEP
3072:puu/UCzcD5blqv+Y8X4zNSqfizVZOaE/eMIgeS16vSEEUqtVlDObJJ7hRdPIE+:pyPy+YU4fqSeu6EtVlSbJlHFj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b8058978f67b7df174366ef5190d584_JaffaCakes118
Files
-
2b8058978f67b7df174366ef5190d584_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 200KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ