Static task
static1
Behavioral task
behavioral1
Sample
2a697e2e65e1f9538f8e9c6fc3c61836_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a697e2e65e1f9538f8e9c6fc3c61836_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a697e2e65e1f9538f8e9c6fc3c61836_JaffaCakes118
-
Size
439KB
-
MD5
2a697e2e65e1f9538f8e9c6fc3c61836
-
SHA1
d5cd2292f633c75df1025ac15a1b2ebb5094a11d
-
SHA256
97ff8a5e2fa430964c89afeff80938d8744fc9431ecd70cc5788f54ddd2952e2
-
SHA512
3563f66fb9c711be1345454946fbbb5a68f2b1332a65033b8d7fd5d9065e5988f48cb8f219371bac09db306d98a4460e8f1ddd019d1dccf6233b2faed4886941
-
SSDEEP
6144:uqBRzB47RHZ7nUtYjWh7a1vbjh9dTinRMM/mFP3BwCZKWB2fsQGUDFKisLkpG:DBRzuZZ7nuYah2ZxasFPDb67BUQw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a697e2e65e1f9538f8e9c6fc3c61836_JaffaCakes118
Files
-
2a697e2e65e1f9538f8e9c6fc3c61836_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 438KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE