Static task
static1
Behavioral task
behavioral1
Sample
2abc761f46c42aa60406c4833854aec4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2abc761f46c42aa60406c4833854aec4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2abc761f46c42aa60406c4833854aec4_JaffaCakes118
-
Size
3.9MB
-
MD5
2abc761f46c42aa60406c4833854aec4
-
SHA1
e6e476481fa3849644ef41177122fb36e8aefcff
-
SHA256
6685284a218d656f02b43bb942129b34dfbcfa26bd9ea8a31d49a8f2e46a800f
-
SHA512
1d66cb255fdaf68190f3eedcc2079feaf78b1d5e2cbca3a27807a5b73a049f7aa1beb673969a7d30a61b0349211712727998e86e6add8d91e9ded9c999c810a6
-
SSDEEP
98304:JH+JUo2OJfxU//+wzykW/ySDVd8Q8gYbSE/9iGr+dd:Je8+fCXjzBWj8VgYWM9iw+dd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2abc761f46c42aa60406c4833854aec4_JaffaCakes118
Files
-
2abc761f46c42aa60406c4833854aec4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 405KB - Virtual size: 1020KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.2MB - Virtual size: 12.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE