Static task
static1
Behavioral task
behavioral1
Sample
2e71988b6920be346d8331b8b789f8fc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e71988b6920be346d8331b8b789f8fc_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e71988b6920be346d8331b8b789f8fc_JaffaCakes118
-
Size
2.2MB
-
MD5
2e71988b6920be346d8331b8b789f8fc
-
SHA1
b4ab2f3392f8f171cb76af5493e985590df04761
-
SHA256
2835cc2a8fb0edd822ac992b8237fa13a19b5d5425da895e645c34e9d6ba4f90
-
SHA512
171981497a316b3e481fd616dcea452c4dff43d5138c4f1e136f01ca7d99021c17fd00d42cdb5b41d9664d0013088d1d1dd0222aada48473115108fe9098ec39
-
SSDEEP
49152:UrqA3CrSQMbc3nwvkwAV3HaqdX9YfV8hEFp8IBOSE7:yLy5nwvkNV360Y9H8I3K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e71988b6920be346d8331b8b789f8fc_JaffaCakes118
Files
-
2e71988b6920be346d8331b8b789f8fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE