Static task
static1
Behavioral task
behavioral1
Sample
2bb56cfdd7fc0c3a1baedc27b95b262d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2bb56cfdd7fc0c3a1baedc27b95b262d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2bb56cfdd7fc0c3a1baedc27b95b262d_JaffaCakes118
-
Size
83KB
-
MD5
2bb56cfdd7fc0c3a1baedc27b95b262d
-
SHA1
1af83c7a416a4af7272180f5d80145fda9901b26
-
SHA256
c5d19805e09c4c8ee74dd019cb888b382cf7055215e13e59d7db309da473ae7d
-
SHA512
392d1495fe47c09a5d4c31973fb7cc8d64f4ba65a1f62fc63d5fe2c6068ae5b612e308d435c411a0feb2ffa482bcd5ddee1598280443b2f19d9cf590414f2433
-
SSDEEP
1536:xlIn809O+YVAMH+wQP4TUL9a2NPWK+/EPn:xlIJkfP+NA4LA2NPWK+K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bb56cfdd7fc0c3a1baedc27b95b262d_JaffaCakes118
Files
-
2bb56cfdd7fc0c3a1baedc27b95b262d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
bSs Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdAta Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATa Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bSs Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.IData Size: 5KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ