Static task
static1
Behavioral task
behavioral1
Sample
2bb89c14b5359ae3e98e8f964d1a6ed0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2bb89c14b5359ae3e98e8f964d1a6ed0_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2bb89c14b5359ae3e98e8f964d1a6ed0_JaffaCakes118
-
Size
122KB
-
MD5
2bb89c14b5359ae3e98e8f964d1a6ed0
-
SHA1
76a42855a1255f2aae04774c0da18d8f4242eca8
-
SHA256
3eca94b5ef2ae2a922021324d6ac190bd4e00bf22cb87d0a2802c6cb0ac3258c
-
SHA512
44546f27845e79879999e56e2e421c7f47d5a89afab4ad979696d89e5908e1f6149f6db9a6dc981fe47613b6c335c2597dba483d74868f2d50e1ff99547d1eaf
-
SSDEEP
3072:nqwdpyhtbSDbcA0k6OEqJRkMjih4I2GBsDJCdzLR:nqHbSz6Zqz5eh4bGBCWN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bb89c14b5359ae3e98e8f964d1a6ed0_JaffaCakes118
Files
-
2bb89c14b5359ae3e98e8f964d1a6ed0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE