Static task
static1
Behavioral task
behavioral1
Sample
2a41a29c05616afadefd70f0692329a8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2a41a29c05616afadefd70f0692329a8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a41a29c05616afadefd70f0692329a8_JaffaCakes118
-
Size
274KB
-
MD5
2a41a29c05616afadefd70f0692329a8
-
SHA1
0c2b6f47f144ea371bcc9ce6fed84ddc3a83b999
-
SHA256
f5702c23a4ede95ed38acddadf1b9eedf581878a4f30b9f4bac0ab00ed3c6c50
-
SHA512
3fd69a484086efb53fd26a3171a2e92c366e7753f829d7c89991e72c084fada620597b2023e73093971d3a8493526c2a73539b915da71e2025cc2655f4f0bc59
-
SSDEEP
6144:ov0bISM/YTzHGpclUfdWiavWDSU8FoJNKLpNM7ALXfd28O2h97:7bIpIzHGpblwySU8FEKVG7ALfd21w7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a41a29c05616afadefd70f0692329a8_JaffaCakes118
Files
-
2a41a29c05616afadefd70f0692329a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 828KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 273KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE