Static task
static1
Behavioral task
behavioral1
Sample
2bb9fccd6fe967421918f54788b8c0e0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2bb9fccd6fe967421918f54788b8c0e0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2bb9fccd6fe967421918f54788b8c0e0_JaffaCakes118
-
Size
195KB
-
MD5
2bb9fccd6fe967421918f54788b8c0e0
-
SHA1
cc016fd13b58df8c8921e0e3d474891f6d562d4a
-
SHA256
e27e71019195f1be937b099fe27286f574c6383421b3725053871d537cbaf70c
-
SHA512
b022d8f769955c22c8062db3dc1b8939a9d343e96740e8bd53997e57e0bb1e7bd344406504f60c56997e303ea8cd380559af668d1adae26975b10c8f65d1f7f2
-
SSDEEP
3072:vcGW3SXqCgJDa3hcQMgjoR/yAhj6ozTwroeG/pzwtfPw+ETo18OVBYX:K3kqWeQMg9AhmoznUhUOLY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bb9fccd6fe967421918f54788b8c0e0_JaffaCakes118
Files
-
2bb9fccd6fe967421918f54788b8c0e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.7stkew Size: 1KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3ev17m Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vq36zw Size: - Virtual size: 11.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.k9woyd Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s0eycg Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: - Virtual size: 3.0MB
.debug Size: - Virtual size: 456KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 192KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE