Static task
static1
Behavioral task
behavioral1
Sample
2d53830cdda95d72a2ad30bc9a84a453_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2d53830cdda95d72a2ad30bc9a84a453_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2d53830cdda95d72a2ad30bc9a84a453_JaffaCakes118
-
Size
1.2MB
-
MD5
2d53830cdda95d72a2ad30bc9a84a453
-
SHA1
772245d5db549c346a11b8505758e70a58f34cc5
-
SHA256
f3036870107f97c58ea88766c742f8b7918e204b1094f63058b9f233c0fcdf9c
-
SHA512
279562dadc062e8b9eaabecb208afbf524baf34b42df3199674b36750fe8c21eb90499816a1b99a8d6b319438099374f460d63c1aa9c76c68821eb756f8d00b3
-
SSDEEP
24576:4nClh/VaeYg2EtfZ4xj+Y6SUuuOeWaYYA/6y/wml:4nkt9Yg2sfZ4xj+ZRyIE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d53830cdda95d72a2ad30bc9a84a453_JaffaCakes118
Files
-
2d53830cdda95d72a2ad30bc9a84a453_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 803KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 342KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ