Static task
static1
Behavioral task
behavioral1
Sample
2bfabc78c8601290d0881d3e0532cdc9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2bfabc78c8601290d0881d3e0532cdc9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2bfabc78c8601290d0881d3e0532cdc9_JaffaCakes118
-
Size
40KB
-
MD5
2bfabc78c8601290d0881d3e0532cdc9
-
SHA1
3e73394e695a9e97223559b4be5ded67da054233
-
SHA256
0e4c1b0181daee5593093514c5a6aada5eeed5c5f261ffd4400a879c4041b70f
-
SHA512
d3d540abf6161ce7688306cc2068e97cc40b2817798d58c4b38449e3fb9d95e3d87eaa5e13783cb81f2d0ebc946545948d1a074cf23ec9fde1aac0a8e17412c5
-
SSDEEP
768:2h1YKapwqPyv7X79b/s2ESNM+QTGuKcKxQ:2h5RcqxbUfSq+jxQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bfabc78c8601290d0881d3e0532cdc9_JaffaCakes118
Files
-
2bfabc78c8601290d0881d3e0532cdc9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ