Static task
static1
Behavioral task
behavioral1
Sample
2a1eb85262ab862ebfd28f7a1b29d475_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a1eb85262ab862ebfd28f7a1b29d475_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a1eb85262ab862ebfd28f7a1b29d475_JaffaCakes118
-
Size
35KB
-
MD5
2a1eb85262ab862ebfd28f7a1b29d475
-
SHA1
92a886ddd2ddfd19b053333c5b226cb4ae99aee0
-
SHA256
bcfcee149aa2e1ca66f8d3d1563c2863f7d36271ce67d8972a6bdbc178a913f9
-
SHA512
ee9e10e765d9bdd8859e5d379c45b12cab98bb2dcb1895dd64f01a35afcc7de8cfa09b3d16b01fcc67863cc9d0f12bb21d85f44b7b15a959ec65739ae0eaf79d
-
SSDEEP
768:6vo2PKFUzpamw16sMjS4M0kvttj2IIs/L28FkchE7JxysWdOuS8/i/n:iQga11BMjS4M1tXqchMTfuS8Un
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a1eb85262ab862ebfd28f7a1b29d475_JaffaCakes118
Files
-
2a1eb85262ab862ebfd28f7a1b29d475_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ