Static task
static1
Behavioral task
behavioral1
Sample
2ba9482997b22c828ec3e1a8dd8da273_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ba9482997b22c828ec3e1a8dd8da273_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ba9482997b22c828ec3e1a8dd8da273_JaffaCakes118
-
Size
2KB
-
MD5
2ba9482997b22c828ec3e1a8dd8da273
-
SHA1
3405e9e3d8991fdbd0ba99712fffb43c8f925b59
-
SHA256
953ff488f0cdc04f0ef527c67403b782c7a654f30c1e0a3d2cf43d1f4a1e5128
-
SHA512
e922ca497d80b6564a6552069f851cd8e245632463263aea4efc8177eb7f89ea7b51af3cf8a923544a8dc7009a53f18e7375777a656b6e85a2862db072e8c2f2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ba9482997b22c828ec3e1a8dd8da273_JaffaCakes118
Files
-
2ba9482997b22c828ec3e1a8dd8da273_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE