Static task
static1
Behavioral task
behavioral1
Sample
2b948a5132ce278444ff56267a1aec80_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2b948a5132ce278444ff56267a1aec80_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b948a5132ce278444ff56267a1aec80_JaffaCakes118
-
Size
116KB
-
MD5
2b948a5132ce278444ff56267a1aec80
-
SHA1
4aac48d3938eeeb0a084ac0c188662314bd1cdc0
-
SHA256
ec97fceb3870913de6a395b4737d8a9c08b53cce6b5e3bd86f05826369f03007
-
SHA512
cb98e9e3c8d7208d65c07ffea3fafe9fe263971c071be3aebeed6a3602d0ce0c17e0248d0eefd4aedac687ea4eee98abcfc3b11a484a81b361caf4d5d9897d9e
-
SSDEEP
1536:+Wgt/Ql/0Cl11rmRqQAWBJPTCE1YwetvD0p0+vfnJ6yuk2:Ot/QyCtVQAWeW+vD0p0+nnhk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b948a5132ce278444ff56267a1aec80_JaffaCakes118
Files
-
2b948a5132ce278444ff56267a1aec80_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ