Static task
static1
Behavioral task
behavioral1
Sample
295a59a4a01ad069eb66ee097a30bfd5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
295a59a4a01ad069eb66ee097a30bfd5_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
295a59a4a01ad069eb66ee097a30bfd5_JaffaCakes118
-
Size
654KB
-
MD5
295a59a4a01ad069eb66ee097a30bfd5
-
SHA1
577c7bf68c434c7b6a452b3bd3f3828a7346f41b
-
SHA256
469337a06868776005c6d0d161323d2174ce255d370fe0b71668e25b2d101c5a
-
SHA512
69099f1b039add51b8380a745fc01ba27c8b62f87179155e320a33de08da131e13a5f212bb42499d6642273bcedee76bddf74dc1025266b4ae0cd15d7c856ba0
-
SSDEEP
12288:NiKqq/aSdpHuyp6sb4GXA3BkouFQE1GgC2gYFT3Dc+pANqSUQnZo+7UvmPKCK:MKBbnnAxXunfTFU+iMRkmzL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 295a59a4a01ad069eb66ee097a30bfd5_JaffaCakes118
Files
-
295a59a4a01ad069eb66ee097a30bfd5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE