Static task
static1
Behavioral task
behavioral1
Sample
2bd9e282eb5a4fea69b1c1d912d418ba_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2bd9e282eb5a4fea69b1c1d912d418ba_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2bd9e282eb5a4fea69b1c1d912d418ba_JaffaCakes118
-
Size
196KB
-
MD5
2bd9e282eb5a4fea69b1c1d912d418ba
-
SHA1
84e03ec104815b1b6fd280e190fc1792ea341be5
-
SHA256
b13019bfa9829b8b39cbb49a193d63958f56b3b4f3fc321046e36879cdaab28a
-
SHA512
cd345b420bb4fed89da6f8c5872d43c33b2fe1e2df71a0ca53b6769270367829107aa63ba3abdc46ea3080b958d967e8d8cdc356a9f33becc915cb5e3e0ef1bd
-
SSDEEP
3072:dPs7n8/1kix+PLAxfEkmBmvziDsDWzQfbaVmoQ9t7tGyTuJz9mqx:dUr8/1ksULUEkmMvBD9b4CtA5x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bd9e282eb5a4fea69b1c1d912d418ba_JaffaCakes118
Files
-
2bd9e282eb5a4fea69b1c1d912d418ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
2x6x0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2x6x1 Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2x6x2 Size: 429B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE