Static task
static1
Behavioral task
behavioral1
Sample
2bb6e1a3eddc7af39b9408dfc82ac800_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2bb6e1a3eddc7af39b9408dfc82ac800_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2bb6e1a3eddc7af39b9408dfc82ac800_JaffaCakes118
-
Size
27KB
-
MD5
2bb6e1a3eddc7af39b9408dfc82ac800
-
SHA1
0eac3a3b86b332aabcf24c651436ead5bde97daf
-
SHA256
e2450fd375607702150c617bae378606bdbc978e4ba82e7c07de7bbf614f202a
-
SHA512
766335a32706c5a94dd07ab81a843fe83bf75fdb4c5db2dea13170e415ace6bf0d8c4c081d214aae0995be25c32f08eb9abadd8554145b28c55f7a10ad184734
-
SSDEEP
384:tZeXfOhDk1erPA75RHyFkVYhj/K3qZ9qn9OXhNRmNKrLBXAsiLR:tZeXfOueri5RjCi3qZg9gzrNQsK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bb6e1a3eddc7af39b9408dfc82ac800_JaffaCakes118
Files
-
2bb6e1a3eddc7af39b9408dfc82ac800_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ