Static task
static1
Behavioral task
behavioral1
Sample
2b4a2dc0626634bd0b7d58dd05ecb430_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b4a2dc0626634bd0b7d58dd05ecb430_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2b4a2dc0626634bd0b7d58dd05ecb430_JaffaCakes118
-
Size
2KB
-
MD5
2b4a2dc0626634bd0b7d58dd05ecb430
-
SHA1
ef8c1ec51557e8f921bbb6e759ed6206da404624
-
SHA256
a4f8b3a1865b1de481e5037100064611625f3a86b3fb85ab41cf9b8ffa8522fa
-
SHA512
9755cc3bf9c25aa4c3d3329cd50ddf2a4531b036cc1efc542a0610ce74027807c7dc5f0409591ff4060ade8e15ac8e580193ac1ac46e0c7e2259e338fa302aa7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b4a2dc0626634bd0b7d58dd05ecb430_JaffaCakes118
Files
-
2b4a2dc0626634bd0b7d58dd05ecb430_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 874KB - Virtual size: 874KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.version Size: - Virtual size: 4B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ