Static task
static1
Behavioral task
behavioral1
Sample
2d384f8577c60eebcbb4bd1cbfc99299_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d384f8577c60eebcbb4bd1cbfc99299_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d384f8577c60eebcbb4bd1cbfc99299_JaffaCakes118
-
Size
6KB
-
MD5
2d384f8577c60eebcbb4bd1cbfc99299
-
SHA1
b53daf46205db9a9a294d2ca9bfd0c922d280278
-
SHA256
446ccbe996a1ed927abb5ec03952730e8de785b53af3a7dad27a0a2f35971d48
-
SHA512
3f7b4429f523521e604dfb49ee1a8402983cd636b9e9f50395b57bca736f340ae285b5f9e0c60fc86d0ddd41bad8c482b0e8df232522725bbf33ab027e686a87
-
SSDEEP
96:ynWQr9ECyWfKPTzhGKG3ljAvWC61WnV+aNgdRE0vBI4wOBbNUdDP5NwPfesf:ynGCyWCTtW3l0vdV+aNgdAl4i75Nyesf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d384f8577c60eebcbb4bd1cbfc99299_JaffaCakes118
Files
-
2d384f8577c60eebcbb4bd1cbfc99299_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE