Static task
static1
Behavioral task
behavioral1
Sample
2b0376c48cbf5b2d1fa4b50dbd740d33_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2b0376c48cbf5b2d1fa4b50dbd740d33_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2b0376c48cbf5b2d1fa4b50dbd740d33_JaffaCakes118
-
Size
12KB
-
MD5
2b0376c48cbf5b2d1fa4b50dbd740d33
-
SHA1
0da3177cf1b366ab6be00546404d17610002ad8b
-
SHA256
cdea1ea6e59935bb51a9db149f47f0835f780cd4bb12062046f5eb725ed06400
-
SHA512
7eaf38825e0f573ae2496c16b1b215175417e16af9c05cc3fa019e2227a0869e3500d67d93c40c4545352d7c80746a33225090915fb3cc1614fef7d4ca177d4b
-
SSDEEP
384:Ig7Ma64uwzwW6BQ1FqcUso03fowHtGXK7cgH9fdL5SRUO:skc61Zo03g67bfdgRr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b0376c48cbf5b2d1fa4b50dbd740d33_JaffaCakes118
Files
-
2b0376c48cbf5b2d1fa4b50dbd740d33_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE