Static task
static1
Behavioral task
behavioral1
Sample
2b61b683b926ec2978d3a05ec9fb6aeb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2b61b683b926ec2978d3a05ec9fb6aeb_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2b61b683b926ec2978d3a05ec9fb6aeb_JaffaCakes118
-
Size
284KB
-
MD5
2b61b683b926ec2978d3a05ec9fb6aeb
-
SHA1
d674cbb55f678ce7aab84c4c76cdfb0c4348a287
-
SHA256
7ab6d4dea30cee9725501dd03924666f494887929218af08aa773fc98eabc69f
-
SHA512
e0ac9d7894e43ed28c126450c98280cd0f98593bddeefca10ce6052dd9f9f1963b071dc1e6e2d96204703faa598257220c93b4330650c1356a507c27ca38f0e9
-
SSDEEP
6144:9qZIqjsj0ryxlzg3I6gwvJ1BHvfrrki1gV2Y8GECRM:9qmQyXw3XBD93rTgdM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b61b683b926ec2978d3a05ec9fb6aeb_JaffaCakes118
Files
-
2b61b683b926ec2978d3a05ec9fb6aeb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
R {0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
R {1 Size: 283KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
R {2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE