Static task
static1
Behavioral task
behavioral1
Sample
2b369ddfa5b3e0f1fee66774135cebe4_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2b369ddfa5b3e0f1fee66774135cebe4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2b369ddfa5b3e0f1fee66774135cebe4_JaffaCakes118
-
Size
32KB
-
MD5
2b369ddfa5b3e0f1fee66774135cebe4
-
SHA1
7d0cd8b3c188b3798ec967f946d977c894de6d17
-
SHA256
624a78ec5bc2e9f8ccfe90748562aaff0b4ce6f6442563a6909ff7c67fe7c0a4
-
SHA512
c9bcf34cb02698237f478ee3cb93cd08655e26a6c5938ca3fc84b5554c44114d5cdd58077089d441edf669ebafebf4572b742e29cdfc917893a248e30a23cde9
-
SSDEEP
768:14qlximgEyxgDNOiJO6hb8tYSRjs2bNry:11l5yxqjO2QYS1sIJy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b369ddfa5b3e0f1fee66774135cebe4_JaffaCakes118
Files
-
2b369ddfa5b3e0f1fee66774135cebe4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ