Static task
static1
Behavioral task
behavioral1
Sample
2b80ba79df2d554bed3623b22f7bb411_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2b80ba79df2d554bed3623b22f7bb411_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2b80ba79df2d554bed3623b22f7bb411_JaffaCakes118
-
Size
677KB
-
MD5
2b80ba79df2d554bed3623b22f7bb411
-
SHA1
7f25b9bdcaf5cfbc26b8d93da31972ba044bf7ca
-
SHA256
75a0f1ba884191b4fdf5a8ad7abc34b163b6f5343297a55d19bb87ab03440ccf
-
SHA512
d06c740d3a7bcb7f8dca3d5856781fa19f83f9bdbd0746daafa668e742298e6f681d1987087453ba6d3c1549c7a69cd698722eb018270940aabe31c7ded7eb58
-
SSDEEP
12288:MU9Xiui3fCovz5XMsES55i1DFO04yZC7NdNrQUB22lfT/R+saLA4nFiO:MUdHurehSYDk0IDNdY2lfrR+dLA4nF7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b80ba79df2d554bed3623b22f7bb411_JaffaCakes118
Files
-
2b80ba79df2d554bed3623b22f7bb411_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ