Static task
static1
Behavioral task
behavioral1
Sample
2ea9a754c4b1b76dfb1c61e276047788_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2ea9a754c4b1b76dfb1c61e276047788_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2ea9a754c4b1b76dfb1c61e276047788_JaffaCakes118
-
Size
156KB
-
MD5
2ea9a754c4b1b76dfb1c61e276047788
-
SHA1
834a767d997b6b235f85892004d593f717dff6b1
-
SHA256
a720168be35c26ca77f9895a1f919b8ce0f8c744a5a733075f760c61336b1c3a
-
SHA512
8fd78b624313dde1fa9a949a0e2bedf952c22638d9fba012ab756a45ccfc3f601947d6d9702b8e6ba6a7cb4b93c276d19029ef79533d021e3139436dad78eae7
-
SSDEEP
3072:lhzTydTQ+pZcrlgDEbOHFP06KGczo2vCnYu/Mw2It:lhnKQ+7ElgSoFlyXvYYiIIt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ea9a754c4b1b76dfb1c61e276047788_JaffaCakes118
Files
-
2ea9a754c4b1b76dfb1c61e276047788_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
pzddgy0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pzddgy1 Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pzddgy2 Size: 21B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE