Static task
static1
Behavioral task
behavioral1
Sample
2e9f96738a53b08541838bd5defaddbd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e9f96738a53b08541838bd5defaddbd_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2e9f96738a53b08541838bd5defaddbd_JaffaCakes118
-
Size
107KB
-
MD5
2e9f96738a53b08541838bd5defaddbd
-
SHA1
35d149f96956cff42ee1782e766e77467ef13b2f
-
SHA256
0c8a1c5cb8f93131265b285bf3e3148f5ca58649c42bb9da12b737227c9a9054
-
SHA512
97ff12622eb936f00affb1f2134e9e40367a2a0082d2cd9312a579a978c5fc5f9936ba9cdbc29949b586cd35966fcc7049efa5a61ecb040ce239a78347b755bf
-
SSDEEP
3072:c86l9Bjdog8wdxu2mY+Q/mGnqlcrfBhL4:c3lFog8ixu2R/m3GrPL4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e9f96738a53b08541838bd5defaddbd_JaffaCakes118
Files
-
2e9f96738a53b08541838bd5defaddbd_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ