Static task
static1
Behavioral task
behavioral1
Sample
2ea7c5469b0cf1fcc2aefbe813f1837a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ea7c5469b0cf1fcc2aefbe813f1837a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ea7c5469b0cf1fcc2aefbe813f1837a_JaffaCakes118
-
Size
57KB
-
MD5
2ea7c5469b0cf1fcc2aefbe813f1837a
-
SHA1
703da882f98312bd78f4889ad33b1e7fdfbb0887
-
SHA256
11a01cb41e53c566a2bf083d9dd43202a4ccb86278b4a84b84c49300965a3daa
-
SHA512
389c83b99c13290ae6c12148e61cdfbcab34c938fc2b0c9fd4de599b1bf52fbc1edfe94674108dc8f47d13dc174cd60b94fec2389a08099e6f4b1dd5cf440bab
-
SSDEEP
1536:GQF8bfwYYYY0YYhSzT9vRhUyDTmgbcJlr+:GQF8bfwYYYY0YYEzT9prTmecfr+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ea7c5469b0cf1fcc2aefbe813f1837a_JaffaCakes118
Files
-
2ea7c5469b0cf1fcc2aefbe813f1837a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ