Static task
static1
Behavioral task
behavioral1
Sample
2d0e714877277d844db57a82baf39d3a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2d0e714877277d844db57a82baf39d3a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2d0e714877277d844db57a82baf39d3a_JaffaCakes118
-
Size
266KB
-
MD5
2d0e714877277d844db57a82baf39d3a
-
SHA1
2485d9f03f962c02a09edaaed1027bef72ea03ac
-
SHA256
1ef18cb06bcca6a720ed6e62895b584a2e555ea332a4edb85978d755a9005b50
-
SHA512
61dc5218ac30afcb31a5694759837b87cfdc35638431817e6b3cfec0e719e14f44d1504244edf492df836f4767253b25d06432af883daa0fefeb65755efae674
-
SSDEEP
6144:qeialt/ZQ46Hz0LzG3o8xTzZysy6m6DqGQicR+:qG/szq8o8NzZN0Itc8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d0e714877277d844db57a82baf39d3a_JaffaCakes118
Files
-
2d0e714877277d844db57a82baf39d3a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 94KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 17KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 137KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE