Static task
static1
Behavioral task
behavioral1
Sample
2bdaf96e2fb7a595de5e33b5fe3f5184_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2bdaf96e2fb7a595de5e33b5fe3f5184_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2bdaf96e2fb7a595de5e33b5fe3f5184_JaffaCakes118
-
Size
120KB
-
MD5
2bdaf96e2fb7a595de5e33b5fe3f5184
-
SHA1
cd96dc3f50dc196e63307365e40c94d0ce085929
-
SHA256
d0dd28d5aa7ae5f8d62cc9e60231d5978b1c3c8e92b9bf9a468798df4b3090f0
-
SHA512
638cf07d67249dde2d7ab5e64c17290e47fa196cd1ab2b8792e3b0db036928b76d0dbb58821beeb2cbef49322a73d9d65b65314a6f316b3c6195cbcdd10fd061
-
SSDEEP
3072:Z/uDwf9se/JUkxRWySst8CojxrdQU9so:Z/usfOCuQROstGxrdV9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bdaf96e2fb7a595de5e33b5fe3f5184_JaffaCakes118
Files
-
2bdaf96e2fb7a595de5e33b5fe3f5184_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ