Static task
static1
Behavioral task
behavioral1
Sample
2750f3903cec0923c8dea8c5fb1754d0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2750f3903cec0923c8dea8c5fb1754d0_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2750f3903cec0923c8dea8c5fb1754d0_JaffaCakes118
-
Size
11KB
-
MD5
2750f3903cec0923c8dea8c5fb1754d0
-
SHA1
bfb73ab53231d5e0d72f07e0c1d0b9ff8ef13755
-
SHA256
d395707029a2765b51dd2ab48ffd031da2cb876eea4b3af7aaccd56efdda9b84
-
SHA512
0d17fb98dd792486a7d21cfcad14776212017bb0015b706864b81659e7a0263d8fd209bb239836426668038ada78ef5f3969c6aaa209723c7c96f9faf909e3f5
-
SSDEEP
192:LQFTK8w4XfrtIUUIEYrVUAkA5n7vLm54lzB63po7sRtlrvRJX:2TK8DKUVEkuAx7zHzApo78tlPX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2750f3903cec0923c8dea8c5fb1754d0_JaffaCakes118
Files
-
2750f3903cec0923c8dea8c5fb1754d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CENSORED Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
CENSORED Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nah Size: 1024B - Virtual size: 883B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nah Size: 891B - Virtual size: 891B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ