Static task
static1
Behavioral task
behavioral1
Sample
2b55ce52cca0615e26fe4f7fd7389cb9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2b55ce52cca0615e26fe4f7fd7389cb9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2b55ce52cca0615e26fe4f7fd7389cb9_JaffaCakes118
-
Size
891KB
-
MD5
2b55ce52cca0615e26fe4f7fd7389cb9
-
SHA1
4daed5970cbdcb791450cc529c78ae71e0bb7ffb
-
SHA256
7d3997ae492646f4ca16ace17e1af8efc8264872c4fbb09e4887fcffa209d571
-
SHA512
733270ad66e900fc8060868cad10b93b005f589112e262ff76972420cc9716d532c461de4f4593f5c5e65377c84cfaed8c32a8b5b05062b5c7b896f195c728f6
-
SSDEEP
24576:+TaBptbW6kSuxVIR/BBFQ3ZY+O+MyH4oNbvmX5/DB5oA/K:+TaBptbWoMVn3JvvpNg11Hi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b55ce52cca0615e26fe4f7fd7389cb9_JaffaCakes118
Files
-
2b55ce52cca0615e26fe4f7fd7389cb9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 649KB - Virtual size: 649KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ