Static task
static1
Behavioral task
behavioral1
Sample
246a099a3c71835dfaadd2feb4177933_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
246a099a3c71835dfaadd2feb4177933_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
246a099a3c71835dfaadd2feb4177933_JaffaCakes118
-
Size
639KB
-
MD5
246a099a3c71835dfaadd2feb4177933
-
SHA1
1d510d7eabb26aefee45d8eb6b61dda019bc8bcb
-
SHA256
e77145aeff0eab383c2a85d03c337cebe4ba39775950ae6990a73b28c1905f18
-
SHA512
72305bc3f6fd2bc53540ade29d52ffb1bc9acb8cd6a6c3080b0ef02672c6e6cd156022732ce0c7227960a2c3775fbad4658c262e23e2f246a94c2b27f9a2eb1b
-
SSDEEP
12288:YA404S2f17AsUd4QIO18IeBzqNN29vzNJiWp2y6qtpfbZgERSHxmvJuC7UiwBA3:YAwF17Id4PyGzC29v7PMyLtbR2a7UpBe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 246a099a3c71835dfaadd2feb4177933_JaffaCakes118
Files
-
246a099a3c71835dfaadd2feb4177933_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 638KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE