Static task
static1
Behavioral task
behavioral1
Sample
2856272580a658675057cfb693b86892_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2856272580a658675057cfb693b86892_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2856272580a658675057cfb693b86892_JaffaCakes118
-
Size
1.9MB
-
MD5
2856272580a658675057cfb693b86892
-
SHA1
47dd805d20a9fe1a857b820e78447d42586b7b3c
-
SHA256
bcd0daafce9887954b141aae9cd21dd153ed2f2199a124390b07174bfed69637
-
SHA512
a149eae98afae995bc65ea446ef7a8188b6e8a68b8c04a3875edef417ff302b63fb9158ae4bae253e4fc74dfb8da76cbe9c0a0fa2267a902ce1b6a90b13df159
-
SSDEEP
49152:kQbcRnW2daPNT+dBKdPGXRRbUWt4032n:iRnLYBgBQPSRbU64m2n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2856272580a658675057cfb693b86892_JaffaCakes118
Files
-
2856272580a658675057cfb693b86892_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 998B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ