Static task
static1
Behavioral task
behavioral1
Sample
2bcfc84724ee3d460331f5cfda8ea5a4_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2bcfc84724ee3d460331f5cfda8ea5a4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2bcfc84724ee3d460331f5cfda8ea5a4_JaffaCakes118
-
Size
114KB
-
MD5
2bcfc84724ee3d460331f5cfda8ea5a4
-
SHA1
aaa781b331f047e33dec58902fa5034826efd8a6
-
SHA256
a1e87f1fda5d86868ea0c9bd42d744c313711eacdd10520f7db85e84de223e91
-
SHA512
d7e1128be0eb69808ba7ec87a254700bc30d3e5b3bb4ba6d499429bb999fa1d2f43ebbb13772d070d88221e2e2f200ffc855fdf5d42c4919c91359d219912cad
-
SSDEEP
1536:aR/9rliX46HGonAszUWWc+zHYTisLPbryiONuY7ZO:aR/TmRbXWoTB7brOuY7ZO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bcfc84724ee3d460331f5cfda8ea5a4_JaffaCakes118
Files
-
2bcfc84724ee3d460331f5cfda8ea5a4_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 478KB - Virtual size: 478KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 218KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ