Static task
static1
Behavioral task
behavioral1
Sample
2eb1183e6ef779790d9a9d2b1fee189f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2eb1183e6ef779790d9a9d2b1fee189f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2eb1183e6ef779790d9a9d2b1fee189f_JaffaCakes118
-
Size
4KB
-
MD5
2eb1183e6ef779790d9a9d2b1fee189f
-
SHA1
94be011034e32b5095518b3369d63f4ae6818192
-
SHA256
2d3c0aa0094c0d2d70635860b78cf1e701081710c6e2a22fefdb2835460ef5d8
-
SHA512
1f845df404d222fddd55bf671c558a971a9a3e6f1e2c277633ecfa941464c7132617bb1f08586d1659f7bcad41befc2e5deef8d339087fd57f584ebe223b6f0d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2eb1183e6ef779790d9a9d2b1fee189f_JaffaCakes118
Files
-
2eb1183e6ef779790d9a9d2b1fee189f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
pcs1 Size: 29KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pcs2 Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pcs3 Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pcs4 Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pcs5 Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pcs6 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pcs7 Size: 339KB - Virtual size: 707KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�ŵ����� Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE