Static task
static1
Behavioral task
behavioral1
Sample
2ba637501e894a43e311466da425a6ab_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ba637501e894a43e311466da425a6ab_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ba637501e894a43e311466da425a6ab_JaffaCakes118
-
Size
82KB
-
MD5
2ba637501e894a43e311466da425a6ab
-
SHA1
dffb7dddac4ee2c47bea62bc60ebd637178b22b6
-
SHA256
60bf58a6b6bb2ebc7f3b5a640e3ace9954eb103e2b5ce20d9aa12bf241a20a53
-
SHA512
871385645c51e522f92f73d3f38c72e73b5f94daf0c356d463e24d0cc53bff9a29f798b27216c438c4faf9406533ad0d33cdb188d649d89ec2c54b783fb5bc43
-
SSDEEP
1536:9m69n24x1XDhknp0YrPnkc04TJL9h4cSanIqLDXujxvUJ:h924jDhkpRrPkc04TJ5hRIqLDXulcJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ba637501e894a43e311466da425a6ab_JaffaCakes118
Files
-
2ba637501e894a43e311466da425a6ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 309B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ