Static task
static1
Behavioral task
behavioral1
Sample
02e3b587cbd294cb3d2dddd3c7bc7e09_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
02e3b587cbd294cb3d2dddd3c7bc7e09_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
02e3b587cbd294cb3d2dddd3c7bc7e09_JaffaCakes118
-
Size
2.5MB
-
MD5
02e3b587cbd294cb3d2dddd3c7bc7e09
-
SHA1
b1f8c015c9824fae53b1ca92a44861bef26b501e
-
SHA256
3bb9b8235c71e514d40c706873beb2cad258a277439e1a45173f661cae98db46
-
SHA512
28f10abd7d2982b5c3693069a6d2cc2e063db52a0b393d56d2ddd1832582c2c3cbb80d4a6afc003afdfd97099d127f885b9a68dbcb452400d645f988f044a27f
-
SSDEEP
49152:bzv6v8vhRY1QUJgiKTPeaerv6bac+7h3cWk2xPtM7ZV1Fe78Aa:bmURUZJgiKTGaj27h3ryj1F28Aa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02e3b587cbd294cb3d2dddd3c7bc7e09_JaffaCakes118
Files
-
02e3b587cbd294cb3d2dddd3c7bc7e09_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 13.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE