Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_2b029a5b9279fd3d0cb27a34af0a96fb.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_2b029a5b9279fd3d0cb27a34af0a96fb.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_2b029a5b9279fd3d0cb27a34af0a96fb
-
Size
1.0MB
-
MD5
2b029a5b9279fd3d0cb27a34af0a96fb
-
SHA1
35552a28417d8f26aa842213d2eb40116c419bb0
-
SHA256
abf0eaef698682a7279cfbedf6cadb8dfdc2e0f51f63c94f5eb5f81291eb53c2
-
SHA512
ab0505dcf31436984de86633883af2f90e2367a28f4dcbfd0139b8bdcb42f5e9e3dcb77e1292fb74ad6437d6f3481921f21ca9bd6e47c20e98de0bd3b5594eb2
-
SSDEEP
24576:pO0ve+O4RyOoxXoKZVbB9uuhFMof2Xq8gn0Mmyp+R2mS:p5edBxtZN3F5fSqK6k2mS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_2b029a5b9279fd3d0cb27a34af0a96fb
Files
-
JaffaCakes118_2b029a5b9279fd3d0cb27a34af0a96fb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 171KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 731KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crypt Size: 154KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE