Static task
static1
Behavioral task
behavioral1
Sample
2b9ea1273fcf11e71c44af136d740077_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2b9ea1273fcf11e71c44af136d740077_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2b9ea1273fcf11e71c44af136d740077_JaffaCakes118
-
Size
383KB
-
MD5
2b9ea1273fcf11e71c44af136d740077
-
SHA1
bef9b33a9196cc1a831fb2a741c1740ea6c056e4
-
SHA256
7defd9034179bd7fae4f59e06dfc1b4d9bec8f05e58d83fcc6ae1970872f9ef9
-
SHA512
2e599f03139d7f99c5933f85c9c3c1643ef3c1b852b7a9f17f048091544fbd37103466cc79b95bc0b6c31dfcf5b2809637fafde0ac1fad3eb3b5c238dc0f1624
-
SSDEEP
6144:C7JtkKx1fcPK1YpVyGUA9az3Q0j0SNUjbR21jKHTFYpVyGUA9az3Q0j0SNU3:CFtkgxcP0Y/ZUA2lNSbR2UHTFY/ZUA26
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b9ea1273fcf11e71c44af136d740077_JaffaCakes118
Files
-
2b9ea1273fcf11e71c44af136d740077_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ