Static task
static1
Behavioral task
behavioral1
Sample
2d73834122b7d771f1fd850dbad87f95_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d73834122b7d771f1fd850dbad87f95_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d73834122b7d771f1fd850dbad87f95_JaffaCakes118
-
Size
252KB
-
MD5
2d73834122b7d771f1fd850dbad87f95
-
SHA1
0cd2c37067ae25fa0febe733b63122331f03313b
-
SHA256
8d98763f8d815a7bb86a109ce04556732cb51c5da1dfe958de6878b3f4b62f34
-
SHA512
579d8672c87aead21921b44746c3fa06c7f8387c4e431f89f7e2c339ec4d252c3ef885ca059de1cbfd5c944fb06527339955001adb2770e30ed16f9c4ed4ef45
-
SSDEEP
6144:1iOMmhTw3YAVw8hfO1Uzw4bATNhMF7NVwU:oOMmlw3YAVHf8IwmMvMFpKU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d73834122b7d771f1fd850dbad87f95_JaffaCakes118
Files
-
2d73834122b7d771f1fd850dbad87f95_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 119KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 420KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE