Static task
static1
Behavioral task
behavioral1
Sample
2a867040117305e8039bebfac8af0ccf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a867040117305e8039bebfac8af0ccf_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2a867040117305e8039bebfac8af0ccf_JaffaCakes118
-
Size
49KB
-
MD5
2a867040117305e8039bebfac8af0ccf
-
SHA1
4987cace60d11bdeb7ad56002a60fc5c52a1e021
-
SHA256
8359265db281a218316bbfcd1ae38d639c6bad5a7a7c455a6f4eb054d7733c00
-
SHA512
5bd0ef3b9ac7b1cbe56eb5d3b107c6696072749f107692c07d3608bcf32a701dae89135c4c2976a73c5fa8b3afb35b7bf24f85df3b780afb189d4a802e7ea4f8
-
SSDEEP
768:sfTZ/mXkJFWBRe9bHyp6VWfiO6+1CTyav7smYI8Q0JLsASn4tj4HSwkjCaB:kTZ/0GFCROSp6O61rvnyQi9SaE0HB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a867040117305e8039bebfac8af0ccf_JaffaCakes118
Files
-
2a867040117305e8039bebfac8af0ccf_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ