Static task
static1
Behavioral task
behavioral1
Sample
2749bcf68b1bbec62dd965d32b6e1241_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2749bcf68b1bbec62dd965d32b6e1241_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2749bcf68b1bbec62dd965d32b6e1241_JaffaCakes118
-
Size
30KB
-
MD5
2749bcf68b1bbec62dd965d32b6e1241
-
SHA1
b551792216a0a892a6ca5fc2b1f2f6e36d85641a
-
SHA256
1e2353beacd8f140785e0b4f2910c8fb69c6ec0c08587b9bdf8da15c49523ca7
-
SHA512
8442d8f406702af7fefa92872e9ad6f3d60993d95a3138b3fd6aaccb3562777ac27873d61a75e2a970c0ab1e42895601fe337c91ee21d38cae5f20a86f1df3af
-
SSDEEP
384:f2pYlB4/AcBEDcgQuXT5NSxJRjAVmldFXws59zBFOo4nH3yDzGOIVcSamBptznTh:fYYloTEHQC5N6RpT597FQ3+4f9tz6r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2749bcf68b1bbec62dd965d32b6e1241_JaffaCakes118
Files
-
2749bcf68b1bbec62dd965d32b6e1241_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text0 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fs Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ