Static task
static1
Behavioral task
behavioral1
Sample
2d8e0c6df085a5a905b45185319a398e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d8e0c6df085a5a905b45185319a398e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2d8e0c6df085a5a905b45185319a398e_JaffaCakes118
-
Size
3.4MB
-
MD5
2d8e0c6df085a5a905b45185319a398e
-
SHA1
3ca54c9b5af30722fc573a045d10d1ac01426793
-
SHA256
ee126635847636046e39fe79f8a77c3b3ffdebd3d0c649ddd19cd874c02d7825
-
SHA512
f93c66b586cb72dea1716743b06d6da279d16380c96ea1fd15529104ff2707220770829cf578a7f93ce869aa1d1b48063d832df25d5da9b2d0f86f74c50a298d
-
SSDEEP
12288:FOXdHPPAq1+ziMv4D3l1UqA0FdGlSOQBRipNN/5ckM6UpGMfHK8OaaVw8XKgK2Nk:QF4W/Y0FISVkYkU8bLaODPxS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d8e0c6df085a5a905b45185319a398e_JaffaCakes118
Files
-
2d8e0c6df085a5a905b45185319a398e_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ