Static task
static1
Behavioral task
behavioral1
Sample
2d978c94b020c5ca60f77052e61a2180_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d978c94b020c5ca60f77052e61a2180_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
2d978c94b020c5ca60f77052e61a2180_JaffaCakes118
-
Size
291KB
-
MD5
2d978c94b020c5ca60f77052e61a2180
-
SHA1
514a1eb8a1fc513e5cdb3e6b492aa8c027495ae9
-
SHA256
09913b2c4c1591f2b90769e351b8376ece98c399fa6402c6b301c495e54e75f6
-
SHA512
227bc03478ee39be061b1c660659e6e1f33296b3a883eddb431164ae0a2013ca902271bd75ee0bf6658a984dd1c92573d042011bde82494365a3844b54d03706
-
SSDEEP
6144:qV2RyXcRKVGnnLd6U8JhYHwIr/Y3esPpIvrD/EAy7YXsOGJ3Q:K2RysgVGnLdI0Qy/Y39E8e8H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d978c94b020c5ca60f77052e61a2180_JaffaCakes118
Files
-
2d978c94b020c5ca60f77052e61a2180_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 290KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE