Static task
static1
Behavioral task
behavioral1
Sample
2d82c33290656924d44d7c529cb87903_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2d82c33290656924d44d7c529cb87903_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2d82c33290656924d44d7c529cb87903_JaffaCakes118
-
Size
203KB
-
MD5
2d82c33290656924d44d7c529cb87903
-
SHA1
b33e7a99fd0b7d5c7a0603fb769f87b4c5824d27
-
SHA256
7748d7ce6b9dda1338a752ca7e89636d99845c65fed57dd1b9b37fd5fab91804
-
SHA512
a6ef229d81dadc79182248dd7c8acdc124573c694ad7700402c9980bc7d09c2b697e17a9de8e3f62eb1f54f23c8d41a28464772c59404819c304740735af62fe
-
SSDEEP
3072:+l0bLiZ4l/viO8jGePGywzCAb4/Kg8tYYg9tu2gucqdyS9/iC0:cMm1OCGG6LYZu2gu/yS96D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d82c33290656924d44d7c529cb87903_JaffaCakes118
Files
-
2d82c33290656924d44d7c529cb87903_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ