Static task
static1
Behavioral task
behavioral1
Sample
2e98412377d38cd386366a4c95fb86ae_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e98412377d38cd386366a4c95fb86ae_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2e98412377d38cd386366a4c95fb86ae_JaffaCakes118
-
Size
33KB
-
MD5
2e98412377d38cd386366a4c95fb86ae
-
SHA1
cbe6da230e4b20ab4d5c3014a80fa93d24673d14
-
SHA256
781cb23d977f83bcd16f5c97ff8167d379212e89fc159238475c5477aa8a6099
-
SHA512
83f36c47f1d44639d93b8046eac2f043670c708322795e0e2bd78a05008cc70e3261718b30b4c287e787240ec9fdb59cf9a9098a5bdd63d6dd31bb0b0d0f8352
-
SSDEEP
768:8JK4UJOLNC97kjwx307xIGsSl/9KSa/5qRercJCc64bF:8JKdpWjIUxpNl/9i/4DVF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e98412377d38cd386366a4c95fb86ae_JaffaCakes118
Files
-
2e98412377d38cd386366a4c95fb86ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 259B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE