Static task
static1
Behavioral task
behavioral1
Sample
2b52dab765284002584baa88d1483fba_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2b52dab765284002584baa88d1483fba_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2b52dab765284002584baa88d1483fba_JaffaCakes118
-
Size
276KB
-
MD5
2b52dab765284002584baa88d1483fba
-
SHA1
9bf9d8baf5085ebad56abd91b2ee3c17e22d9d05
-
SHA256
badd498bdd1f9c77bbd1a9adc33854e7c9ba698dcc874496f8ad04f0cde764c4
-
SHA512
3767c4f43a26517cf05ad04e54269dae0f71643b95a0f68dadf32858d35ee96e1e9eca5731b7a7e0bc3978c620929673749d3f70619932ccff4d4eeacf03dcc7
-
SSDEEP
6144:AhRIDuigH9qGy+i1kNGWoRcsLradqSQ5OMKh44Jb6GRXgbVbJMNDlnFhzDoS:AhmDrgBskNGPVrSQ5Eh4Ud+bVbJM/voS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b52dab765284002584baa88d1483fba_JaffaCakes118
Files
-
2b52dab765284002584baa88d1483fba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 265KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE